If someone had access to your your chat.db file/your apple id and login, could they alter it from a remote place? submitted by /u/Adventurous-North522 [link] [comments]

http://www.asmreekasounds.com/songs/mp3/arabic/ submitted by /u/Shot-Occasion418 [link] [comments]

Learn about and get hands-on with common technologies and security products used in corporate environments; both host and network-based… Continue reading on Medium »

Hi, for example I have this code: do { buf = malloc (500); memset (buf, 0 , 500); a = recv (socket, buf, 499, 0); } while (receiveBuffer > 0) I understand the problem is that the buffer is never freed and it allocates the same buffer again and again, but I don't understand how can I use this memory leak for exploitation. Thank you very much. submitted by /u/secret1337secret [link] [comments]

http://www.silcom.com/~barnowl/chain-letter/archive/%21content.html submitted by /u/Shot-Occasion418 [link] [comments]

http://108.185.100.229/VideoDownloader/ submitted by /u/omahajackhawk [link] [comments]

http://frpworld.com/downloads/ submitted by /u/c-rn [link] [comments]

submitted by /u/c-rn [link] [comments]

Suppppp guysss, this is my first write-up about bug bounty, let me introduce myself, my name is Redza you can call me za, ja, dza, red, or… Continue reading on Medium »

I am Shubham Sudhir Sawant a Security Researcher, super thrilled to write my very first blog. Continue reading on Medium »

Anonymously Hiding Tools: Continue reading on Medium »

Hi everyone! I’m back with another blog, this time I realized that my blogs about bug bounty had a lot of views so I’m back with a blog… Continue reading on Medium »

Welcome back, I hope everyone is well. Without further hesitation let’s dive into it! Continue reading on Medium »

Cc: InsidePHD Continue reading on System Weakness »

Hey guys, I am back again with another writeup about how I found a seviour bug in my college’s student portal which leads to a data leak… Continue reading on InfoSec Write-ups »

gathering different kinds of information about the target. Continue reading on Medium »

I usually track acquisitions of websites for which I am hunting bugs regularly… Continue reading on InfoSec Write-ups »

Hello everyone, Continue reading on Medium »

I am trying to find ssh-agent key@comment in a core file. Anyone know how to find it. I have tried gdb and using ghidra but I haven’t found any useful information. Maybe I’m missing something simple? submitted by /u/Critical-Balance7980 [link] [comments]

What are you guys/gals using besides FTK Imager to do disk images (on live PC's or loose media) on a regular basis? Does Encase Imager even exist / is it still supported? Can only find docs and no downloads on their site post Opentext acquisition Tableau Imager is also under the Opentext acquisition, has had no updates since 2020, seems to require a forensic bridge making it unsuitable as a live imaging tool. Also does not support logical images. X-Ways is still faster than FTK Imager, but the requirement for using a dongle is a major downside. Lots of laptops out there only have one USB port and that means either X-Ways can't work or it needs a hub so worst case we are documenting changes that the hub makes in addition to artifacts from the dongle and the connected drive, and best case there's multiple USB ports but we're still documenting twice as much investigator impact as FTK imager running straight off it's own destination device. Magnet has Acquire, but this is a massive program that requires .Net libraries which are almost gauranteed not to be on your target machine if attempting a live capture, and it doesn't support making logical images, a big downside in an era with so much full disk encryption. submitted by /u/QuietForensics [link] [comments]

Hello everybody, I've been working in Computer and Mobile Forensics for about a year. I have a couple of clients a month and the business is not bad. I would like to purchase UFED 4PC or some other forensic software, especially for doing Mobile Forensics. Unfortunately, I still can't afford to spend + $ 7500 Are there any solutions? Obviously legal, to save money? submitted by /u/Zipper_Ita [link] [comments]

Glassdoor disclosed a bug submitted by seifelsallamy: https://hackerone.com/reports/1695989 - Bounty: $500

Nextcloud disclosed a bug submitted by tomorrowisnew_: https://hackerone.com/reports/1608039

Nextcloud disclosed a bug submitted by daniel_calvino_sanchez: https://hackerone.com/reports/1641088

Nextcloud disclosed a bug submitted by ro0telqayser: https://hackerone.com/reports/1604606

submitted by /u/sanitybit [link] [comments]

submitted by /u/sanitybit [link] [comments]

submitted by /u/sanitybit [link] [comments]

submitted by /u/sanitybit [link] [comments]

submitted by /u/sanitybit [link] [comments]

submitted by /u/Fugitif [link] [comments]

submitted by /u/flexibeast [link] [comments]

Working on OSINT investigations can be a fun and thoroughly rewarding activity that anyone can contribute to. Continue reading on Medium »

Article URL: https://www.bleepingcomputer.com/news/security/uber-hacked-internal-systems-breached-and-vulnerability-reports-stolen/ Comments URL: https://news.ycombinator.com/item?id=32869450 Points: 4 # Comments: 1

Article URL: https://www.scmagazine.com/analysis/cloud-security/vulnerability-allows-access-to-credentials-in-microsoft-teams Comments URL: https://news.ycombinator.com/item?id=32866108 Points: 1 # Comments: 1

Article URL: https://www.vectra.ai/blogpost/undermining-microsoft-teams-security-by-mining-tokens Comments URL: https://news.ycombinator.com/item?id=32864203 Points: 1 # Comments: 0

NPM 供应链安全最佳实践指南 by 路人甲 Gitlab常见漏洞复现及后利用 by 路人甲 SEVulDet：基于语义增强的系统漏洞挖掘器 by ourren 一文区分个人信息、敏感个人信息和隐私信息 by ourren 更多最新文章，请访问SecWiki

https://crypt0ace.github.io/posts/Shellcode-Injection-Techniques-Part-3/ submitted by /u/Potential_Waltz7400 [link] [comments]

As a pentester, I sometimes have to go on site to look for physical / social vulnerabilities. I'm currently using a gopro and just started experimenting with a voice recorder (Philips DVT2810). However, the go pro isn't very stealthy. The voice recorder is invisible in my pocket, but wasn't picking up conversations the way I hoped and is lacking video evidence of course. What do you use to record when it needs to be stealthy? Edit: some people pointed out that this might be illegal. In my country it’s allowed as long as I’m part of the conversation. submitted by /u/Amtrox [link] [comments]

currently doing a ctf challenge where you need to unencrypt a heavily locked down drive encrypted with bitlocker. i've done some tinkering and i think i've landed on a solution involving using a powershell privilege escalation exploit to create a new admin user, logging in to it and disabling bitlocker from the control panel. however, part of the exercise involves both powershell and the command prompt being but behind a blacklist, meaning i can't use something like powershdll to run powershell scripts from cmd. is there any other way to do this? or is my approach to this problem completely wrong? submitted by /u/Xianthu_Exists [link] [comments]

Hooking is pretty easy to beat. It's efficient, low overhead, but unreliable. It also results in very low resolution scrutiny of program behavior. I think I have an idea, not to replace hooking, but maybe add a more resilient redundant behavior analysis mechanism. Computational overhead is my primary concern, and also I'm unsure how often you can halt a process's normal execution flow to do this without noticeable performance impact. To be honest, I'm actually not even sure how, without implementing this in the kernel, you would, at some interval, redirect the instruction pointer to your analysis code (by force, not by hooking) and also protect it from attacker modification. But I think the idea itself is interesting enough to be discussion-worthy. I think the defender's best option to de…

1. What is Social Engineering? Continue reading on Medium »

我们总结推荐了本周的热点资讯、安全事件、一周好文和省心工具，保证大家不错过本周的每一个重点！

四面环海的地理属性以及远离任何强大同盟的地缘政治因素，澳大利亚似乎向来对周遭环境颇为敏感，网络空间也不例外。

一个新的恶意软件包利用受害者YouTube频道自我传播。

作为安全事件发生后，进行事后响应的重要组成部分，攻击溯源有助于企业在一定程度上还原攻击者路径及攻击手法，并以此加强自身防御，尽量避免二次攻击的发生。但在实际操作中，溯源的难度、时间的可控性等往往难以估量，甚至还会带来不小的内部损耗，但面对有时不得不做的溯源，企业应该如何评估考量？该从哪些方面提升溯源效率，本期话题我们就以企业进行攻击溯源为话题，对相关问题展开讨论。

《分类分级要求》给出了数据分类分级的原则和方法，包括数据分类分级基本原则、数据分类框架和方法、数据分级框架和方法等。

安全研究人员发现，以“女王去世”、“哀悼女王”等为诱饵的网络钓鱼攻击呈现持续上升的趋势。

Hi, I am trying to figure how my wordpress site has been hacked (index.php replaced with some nasty code). Comparing with backups, I can determine that this happened after yesterday 11pm, since in that backup index.php was clean. What should I search in apache logs? POST request? I have no suspicious logins in FTP or cPanel or Wordpress backend, so I assume they hacked through some vulnerable plugin/theme. Thank you! submitted by /u/g-simon [link] [comments]

According to the mimikatz author, Benjamin Delpy (gentilkiwi) at https://github.com/gentilkiwi/mimikatz; mimikatz is a tool I've made to learn C ... I'm not a programmer and can't stop thinking about it, so I google it and found :: actually used in C++ and not C as discussed at quora https://www.quora.com/What-does-mean-in-C-programming-2 The :: operator is the C++ scope resolution operator. It has no meaning in C. C and C++ are different languages. My question is why does mimikatz use :: and not argument or flag just like any other program? submitted by /u/w0lfcat [link] [comments]

I've been reading an article about how an redis commander exploit can lead to database leakage ( https://blog.criminalip.io/2022/09/06/redis-database-leaks/ ) and I was wondering whether the general rule of thumb is that open source projects are more vulnerable to data breaches because they have exposed code? I've been receiving mixed answers so I'd appreciate any/all insight, thanks. submitted by /u/cheeztoshobo [link] [comments]

Sites often use HTTP or URL parameters to redirect users to a specified URL without any user action. While this behavior can be useful, it… Continue reading on Medium »

— — — — —-— — — — — Happy Engineer`s Day — — — — — — — — — — Continue reading on Medium »

Welcome aboard AstroNut 👨‍🚀👩🏻‍🚀🧑🏽‍🚀 Continue reading on Medium »

Several years ago, an up-to-date list of all the working dirs of this sub from its start, was regularly shared here. Would you like to restart this adventure ? View Poll submitted by /u/SubliminalPoet [link] [comments]

I've created an index site. I have indexed the last couple months worth of shared ODs, as well as some of my own finds. I would like to get your guys feedback on it. Just before the comments start to flow: I know the look and feel isn't great, but I've coded it all myself without any templates and I am no designer. I know the search is a little bit slow. I've been playing with indexes on my sql tables to see if that helps. I know ODCrawler looks way better and searches way faster. This is a new experiment for me as a new developer so please be easy. With that said I welcome all constructive feedback. So far I have personally used this index to watch multiple movies and find some roms. Let me know if you able to find anything useful or see any value in what I am doing here. Additionally, if you want to submit and OD for me to index please feel free. I have 4 worker nodes actively indexing submitted urls. https://opendirindex.opensho.com/index.php submitted by /u/coldmateplus [link] [comments]

Additional 2 individuals have been added to the OFAC Sanctioned list as of 14.09.2022. Those two individuals are suspected of processing… Continue reading on Medium »

Shopify disclosed a bug submitted by xenx: https://hackerone.com/reports/1605962 - Bounty: $500

U.S. Dept Of Defense disclosed a bug submitted by cdl: https://hackerone.com/reports/1122791 - Bounty: $2000

Linktree disclosed a bug submitted by bug_vs_me: https://hackerone.com/reports/1644062 - Bounty: $750

submitted by /u/louis11 [link] [comments]

submitted by /u/onlinereadme [link] [comments]

submitted by /u/0xfffffg [link] [comments]

submitted by /u/vjjmiras [link] [comments]

submitted by /u/CyberMasterV [link] [comments]

submitted by /u/jat0369 [link] [comments]

submitted by /u/g_e_r_h_a_r_d [link] [comments]

submitted by /u/jeandrew [link] [comments]

submitted by /u/Gallus [link] [comments]

Article URL: https://thecyberexpress.com/wordpress-sites-hacked-via-zero-day-vulnerability/ Comments URL: https://news.ycombinator.com/item?id=32854692 Points: 2 # Comments: 1

We believe that "good enough" is never enough when it comes to pushing the performance of Chrome. Today’s The Fast and the Curious post explores how we sped up the startup times of Chrome on Android by more than 20% by providing an interactive freeze-dried preview of a tab on startup. Read on to see how the screenshot falls short, and freeze-drying your tabs makes for a better browser. Background and Motivation Rendering web content can be computationally intensive and can feel slow at times compared to a native application. A lot of work needs to be done to dynamically load resources over the network, run JavaScript, render CSS, fonts, etc. On mobile devices this is particularly challenging and Chrome can often only keep a handful of web pages loaded at a time due to the memory constrai…

Hi all, I haven’t been working on forensics for a few years. Haven’t been up to speed with the latest and greatest on mobile forensics. Is the Cellebrite Touch 2 still a dependable solution to capture iPhones? What are your thoughts? Thanks. submitted by /u/hw60068n [link] [comments]

Google数据安全自动化建设之路（白皮书） by ourren 更多最新文章，请访问SecWiki

Google数据安全自动化建设之路（白皮书） by ourren 更多最新文章，请访问SecWiki

Written by Mike Cunningham and Jamie Williams Continue reading on MITRE-Engenuity »

1.1      Introduction This blog is meant to serve as a guide for practical exploitation of systems that allow for the NTLMv1 authentication protocol. While NTLMv1 is hardly ever needed anymore, a surprising number of organizations still use it, perhaps unknowingly. There are however some VPN products that still currently instruct their users to downgrade NLTM... The post Practical Attacks against NTLMv1 appeared first on TrustedSec.

美国财政部海外资产控制办公室9月14日宣布，对隶属于伊朗伊斯兰革命卫队（IRGC）的10名个人和两家实体实施制裁。

Twitter平台忽视了他的安全担忧，十多年来始终落后于行业安全标准。

攻击者通过推销各类诈骗和不安全的谷歌Chrome扩展程序域名来诱导用户。

本书从基础概念科普和工程化实践指导角度出发，详细介绍了企业IAM相关基本概念和技术以及身份治理。

When X came out earlier this year, it was a competent, well-crafted tribute to ’70s slasher flicks from Ti West, but there was not much to… Continue reading on Medium »

Is this safe? Does this mean they will be able to see all of our activity? Any help would be appreciated! Edit: Here are the instructions they gave us: https://imgur.com/a/FkizKkS submitted by /u/coolmanic [link] [comments]

submitted by /u/tbhaxor [link] [comments]

Article URL: https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2022-34721 Comments URL: https://news.ycombinator.com/item?id=32848953 Points: 2 # Comments: 0

Article URL: https://blog.rust-lang.org/2022/09/14/cargo-cves.html Comments URL: https://news.ycombinator.com/item?id=32847567 Points: 4 # Comments: 0

作者：Moyun@墨云科技VLab Team 原文链接：https://mp.weixin.qq.com/s/ck5wwDi9hXmjtiPPfRgtXw 概述 NFC在人们的日常生活中扮演了重要角色，已经成为移动设备不可或缺的组件，NFC和蓝牙类似，都是利用无线射频技术来实现设备之间的通信。因此芯片固件和主机NFC子系统都是远程代码执行(RCE)攻击的目标。 CVE-2021-0870是一...

作者：Moyun@墨云科技VLab Team 原文链接：https://mp.weixin.qq.com/s/ck5wwDi9hXmjtiPPfRgtXw 概述 NFC在人们的日常生活中扮演了重要角色，已经成为移动设备不可或缺的组件，NFC和蓝牙类似，都是利用无线射频技术来实现设备之间的通信。因此芯片固件和主机NFC子系统都是远程代码执行(RCE)攻击的目标。 CVE-2021-0870是一...

U.S. Dept Of Defense disclosed a bug submitted by shreky: https://hackerone.com/reports/1631447

U.S. Dept Of Defense disclosed a bug submitted by malcolmx: https://hackerone.com/reports/1627970 - Bounty: $1000

U.S. Dept Of Defense disclosed a bug submitted by malcolmx: https://hackerone.com/reports/1626198 - Bounty: $1000

U.S. Dept Of Defense disclosed a bug submitted by malcolmx: https://hackerone.com/reports/1627995 - Bounty: $1000

U.S. Dept Of Defense disclosed a bug submitted by codeprivate: https://hackerone.com/reports/1628209 - Bounty: $4000

U.S. Dept Of Defense disclosed a bug submitted by ahmed0x0mahmoud: https://hackerone.com/reports/1631471

U.S. Dept Of Defense disclosed a bug submitted by sudi: https://hackerone.com/reports/1628102 - Bounty: $500

U.S. Dept Of Defense disclosed a bug submitted by byteone: https://hackerone.com/reports/745171

U.S. Dept Of Defense disclosed a bug submitted by 0xr3dhunt: https://hackerone.com/reports/1623685

U.S. Dept Of Defense disclosed a bug submitted by bate5a: https://hackerone.com/reports/1628012

U.S. Dept Of Defense disclosed a bug submitted by shuvam321: https://hackerone.com/reports/1681208

U.S. Dept Of Defense disclosed a bug submitted by thpless: https://hackerone.com/reports/1662474

U.S. Dept Of Defense disclosed a bug submitted by 0x45: https://hackerone.com/reports/1641148

Meredith disclosed a bug submitted by error201: https://hackerone.com/reports/1221942

Dropbox disclosed a bug submitted by fransrosen: https://hackerone.com/reports/1590794 - Bounty: $6909

U.S. Dept Of Defense disclosed a bug submitted by fdeleite: https://hackerone.com/reports/1309386

Hello everyone, one of the most interesting functions is file uploading, vulnerabilities in file uploads usually lead you to critical or… Continue reading on InfoSec Write-ups »

Introduction Continue reading on Medium »

Hii all, I am back with a new hacking story . A few days ago, I was hunting on one of the VPD program Where i find a host-head injection… Continue reading on Medium »

submitted by /u/h0wlett [link] [comments]

submitted by /u/0xdea [link] [comments]

submitted by /u/albinowax [link] [comments]

submitted by /u/nopslider [link] [comments]

submitted by /u/jeandrew [link] [comments]

submitted by /u/cutboxhe [link] [comments]

To be honest, sliver is the big deal. It's a brand new C2 Framework (still in development) and really have a lot of potential. We showcased how to work with it and perform various TTPs, like persistence with exe hijacking or registry tweaking. The very default beacon was able to bypass Windows 10 Defender. I learned a lot (and was learning in real time while streaming, so I put timestamps for you to navigate it easier) and hope you will learn something new from the video too. It is available on my Youtube: https://youtu.be/QO_1UMaiWHk submitted by /u/lsecqt [link] [comments]

submitted by /u/tbhaxor [link] [comments]

So I'm trying to use hydra to brute force a password check. It's for a class on VMs. How can I pull just logins from Active Directory? I've been able to pull users, but it's their legal names and not their logins. Then in Hydra, how do I know what protocol to use? submitted by /u/w_sohl [link] [comments]

submitted by /u/ilikemacsalot [link] [comments]

今日暂未更新资讯~ 更多最新文章，请访问SecWiki

今日暂未更新资讯~ 更多最新文章，请访问SecWiki

Article URL: https://arxiv.org/abs/2209.05833 Comments URL: https://news.ycombinator.com/item?id=32838301 Points: 1 # Comments: 0

Hi, I think I may be missing something very straightforward but it's not connecting in my head just yet. How does Cloudflare verify that you own the domain zone when you sign up and "Add a site"? I added a domain and just had to set my DNS nameservers to "jake.ns.cloudflare.com" and "marlowe.ns.cloudflare.com". These nameservers aren't unique to my domain zone right? So what if I was trying to hijack the Cloudflare config for another site and they already had these nameservers set up? Does Cloudflare check to see if there are existing CF nameservers and then ask the user to change them to a different pair? Hope my question makes sense. Appreciate any insight from this community. submitted by /u/createdforrequest [link] [comments]

https://tryhackme.com/room/redteamthreatintel Continue reading on Medium »

Reconnaissance Continue reading on Medium »

Cyber security red-teaming is a rather new paradigm. A few years ago when we started providing red-team as a service, all references for… Continue reading on Medium »

Have I always been able to brute force domain cached credentials just by disabling the network or is my AD lab messed up? I’m sure this… Continue reading on Medium »

Google 和 Meta 涉嫌在韩国未经用户同意收集个人信息并将此用于在线投放个性化广告，分别被罚 692 亿韩元和 308 亿韩元。

此次修改将进一步做好相关法律的衔接协调，完善法律责任制度，保护个人、组织在网络空间的合法权益。

Google宣布以54亿美金收购网络安全公司 Mandiant，未来Mandiant将在谷歌云的支持下运营，其品牌依旧存在。

该网络攻击行为被视为“解放巴勒斯坦”运动的组成部分。

近日，微软发布 2022年9月 安全补丁，修复了针对 38 款微软产品的 63 个漏洞，其中18个权限提升漏洞，1个安全功能绕过漏洞，30个远程代码执行漏洞，7个信息泄露...

近日，微软发布 2022年9月 安全补丁，修复了针对 38 款微软产品的 63 个漏洞，其中18个权限提升漏洞，1个安全功能绕过漏洞，30个远程代码执行漏洞，7个信息泄露...

No content preview

Pentesting needs to evolve to find AI based risks Continue reading on InfoSec Write-ups »

No content preview

No content preview

Pentesting needs to evolve to find AI based risks Continue reading on InfoSec Write-ups »

No content preview

No content preview

Pentesting needs to evolve to find AI based risks Continue reading on InfoSec Write-ups »

No content preview

作者：Alfy@墨云科技VLab Team 原文链接：https://mp.weixin.qq.com/s/MtFZc1Zv6uNo25ORNijpaQ 什么是web登录入口 目前，大多数Web站点都具备身份验证的功能，防止非授权访问。web站点中每个账户都有特定的操作权限，如果非授权用户能够通过非常规的方式（如弱口令爆破、窃取他人的用户名口令等）登录他人账户，则可能造成站点用户信息泄露、站...

作者：b1cc@墨云科技VLab Team 原文链接：https://mp.weixin.qq.com/s/1KoRr53tNryUKT4P1r7n6A 本文是笔者初学pwn的知识梳理，如有错误之处，敬请斧正。 栈溢出漏洞 原理 栈是一种后进先出的数据结构。在调用函数的时候，都会伴随着函数栈帧的开辟和还原（也称平栈）。栈结构示意图如下（以32位程序为例）： 如图所示，栈空间是从高地址向低地...

2022年8月27日至28日，盛夏落幕，初秋刚至。在万物更替的时节，KCon以全新的形式庆贺了十一周岁的生日。前十年，KCon一直行走在探索与分享网络攻防技术的道路上，也收获了众多同伴的支持。第十一年，KCon迈步新生，以“+1”的决心和动作开启了新十年。 2022年 KCon首次采用全线上直播且免费参与的方式，中国信息安全、嘶吼、数说安全、蘑菇云4家媒体同步线上转播。两天时间，热情观众为K...

作者：Alfy@墨云科技VLab Team 原文链接：https://mp.weixin.qq.com/s/MtFZc1Zv6uNo25ORNijpaQ 什么是web登录入口 目前，大多数Web站点都具备身份验证的功能，防止非授权访问。web站点中每个账户都有特定的操作权限，如果非授权用户能够通过非常规的方式（如弱口令爆破、窃取他人的用户名口令等）登录他人账户，则可能造成站点用户信息泄露、站...

作者：b1cc@墨云科技VLab Team 原文链接：https://mp.weixin.qq.com/s/1KoRr53tNryUKT4P1r7n6A 本文是笔者初学pwn的知识梳理，如有错误之处，敬请斧正。 栈溢出漏洞 原理 栈是一种后进先出的数据结构。在调用函数的时候，都会伴随着函数栈帧的开辟和还原（也称平栈）。栈结构示意图如下（以32位程序为例）： 如图所示，栈空间是从高地址向低地...

2022年8月27日至28日，盛夏落幕，初秋刚至。在万物更替的时节，KCon以全新的形式庆贺了十一周岁的生日。前十年，KCon一直行走在探索与分享网络攻防技术的道路上，也收获了众多同伴的支持。第十一年，KCon迈步新生，以“+1”的决心和动作开启了新十年。 2022年 KCon首次采用全线上直播且免费参与的方式，中国信息安全、嘶吼、数说安全、蘑菇云4家媒体同步线上转播。两天时间，热情观众为K...

I’ve been scrolling through LinkedIn, Handshake, Indeed, etc job sites all of these positions require some experience level of DF from a job. Even internships are harder to land. I applied to a Special Investigations posting that analyzes Malware but outside of that I think it’s harder if you don’t have law enforcement or Military experience. I would not be surprised if people with Cyber Security degrees are stumping out those with Computer Forensic degrees because as opposed to Cyber Sec this industry has no entry level jobs. It’s all on a whim. submitted by /u/Beercanadawhiskey [link] [comments]

Hello, I am a high school senior debating wether or not going to college. Here is my reasoning. My goal job is blockchain/cybercrime investigator with a blockchain company, or maybe even starting my own company. Now, I did some research on the people who have these crime investigator jobs, and most of them went to college for unrelated studied, with some not even going to college at all, most had a career background in cyber law enforcement jobs. So now my question can i get some reputable certificates on my resume, get a entry level digital forensics job, even with a lower salary, then after 4 years advance to cybercrime investigator position with a 140k+ salary. Because why go use 4 of the best years of your life and spend an absurd amount of money to get degree you probably wont even use, when you can work those 4 years at a job you enjoy and earn some money to invest by the time your in your early 20s. For reference, I will be graduating high school at 17 and will have about 8 months till I turn 18, so my plan would be getting as many reputable certifications as possible in that time, then looking for a entry level position as soon as i turn 18. Please let me know if you think this is possible and any food cert suggestions. submitted by /u/WannabeCyberSecurity [link] [comments]

hi all! new to ediscovery and have been asked to collect emails between two individuals. the time frame is going back two months and am looking for anything related to "tender requests" what would be the best way to set up search queries to narrow down the field of emails? ex: any sender from [sender1@yahoo.com](mailto:sender1@yahoo.com) to any receiver [sender2@gmail.com](mailto:sender2@gmail.com)? is it better to do keyword search on entire message vs subject only? any suggestions welcomed pls submitted by /u/justlikebadmedicine [link] [comments]

I’ve been tinkering with writing a chess engine as this fun security engineering project write-up where the vulnerable chess web app uses peer-to-peer and the attacker exploits the victim peer, the pieces start breaking the rules, we use memory forensics to try to analyze and detect the exploitation heuristically via dynamic run-time analysis with baselining… Anyway, I digress. As part of this project I’m thinking a lot about chess engines and wonder: Hmm, I could probably write a chess sim inside a GPU compute shader to calculate a large number of variations in parallel. Then it struck me: If I can do that, couldn’t we write beacons which mostly execute their malicious code within a GPU shader, then pass the I/O in and out of a more benign process? You’d still need to do some stuff on the CPU (any effects on target), but with popular C2 frameworks you have this significant, sort of robust beacon agent code injected in a process to be detected. Sleep masking hides it from memory scanning kinda sorta, but not really against good defensive techniques. Seems like you could hide most of that memory signature inside a GPU compute shader and have much less “robust” code (essentially attack surface for defenders to use for detection) in RAM. Doubt any EDRs out there are scanning VRAM… Even if you did zero processing in a shader, even just hiding data in VRAM when not in-use (example: sleep masking) seems interesting on its own. Maybe someone’s heard of such a thing? Google is terrible with results when “GPU” and “red team” point to non-cyber branding slang. Google Scholar also turned up nothing. submitted by /u/Jonathan-Todd [link] [comments]

Hello world and welcome to HaXeZ where today we’re going to be getting a bit more technical and looking at C2s. To clarify, C2 is short… Continue reading on Medium »

Hello world and welcome to HaXeZ, in this post we’re going to be walking through the 3rd Red Team challenge in the Red Team Fundamentals… Continue reading on Medium »

In a red team operation, you might start with no more than a company name, from which you need to start gathering information about the… Continue reading on Medium »

Try Hack Me hosts a small number of OSINT CTF’s. I completed the geolocation one some time ago, so thought i’d come back and take a look… Continue reading on Medium »

Here’s my writeup of the Intel101 OSINT CTF by Champlain College on CyberDefenders, including solutions (spoiler alert!). The challenges… Continue reading on Medium »

Challenge name: Job Interview Continue reading on Medium »

TikTok disclosed a bug submitted by f_m: https://hackerone.com/reports/1531235 - Bounty: $500

Glassdoor disclosed a bug submitted by nokline: https://hackerone.com/reports/1621540 - Bounty: $1700

Glassdoor disclosed a bug submitted by nokline: https://hackerone.com/reports/1632119 - Bounty: $500

Hyperledger disclosed a bug submitted by cre8: https://hackerone.com/reports/1695472 - Bounty: $1500

GitLab disclosed a bug submitted by patronum-m: https://hackerone.com/reports/1696814

GitLab disclosed a bug submitted by afewgoats: https://hackerone.com/reports/1531958 - Bounty: $1160

GitLab disclosed a bug submitted by vakzz: https://hackerone.com/reports/1609965 - Bounty: $33510

Hello, do any of the veterans have a suggestion of how to take a logical image of a Mac machine remotely? I am considering the dd command to take the image and storing to an external drive. Are there any more reconnended or "forensically sound" ways to do this? I can not use digital collector in this situation since it's off-site. Thank you for any advice! submitted by /u/Fun_House2633 [link] [comments]

Not relatively new to this field but I want to start my first project that I can put on my resume. Im kind of loss on which tools to use as well outside of FTK Imager, Infranview and Autopsy. submitted by /u/OhmyMary [link] [comments]

Hello, I'm graduating soon with a BS in Cybersecurity and just started my first security analyst job. However, I'm interested in studying digital forensics and pivoting into that area. I'm wondering what the good choices are for 100% online masters degree programs for Digital Forensics. Based on my own research so far I've read good things about Champlain College and SANS. There is also University of the Cumberlands and University of Central Florida but not sure how all these choices compare in terms of preparing students for career readiness and school reputation. Also, recommendations for other schools are great too. Any insight on this would be greatly appreciated. Thank you. submitted by /u/Nurith [link] [comments]

Hello everyone, Just got this kit to try out and recover some data from an old 160GB (PATA) HDD drive. I connected everything as should and the firmware of the Tableau is up to date. When i connect to my laptop through USB and power the T35u, my laptop doesn't get recognized as a host and he also does not find the drive. The drive is not broken since i can hear him running. Also, i was able to find the device on my PC in update mode, so no cables are broken. My laptop is a MSI GF65 with windows 11 as OS. Can anyone please help me? ​ ​ https://preview.redd.it/m1rc0raqwmn91.png?width=923&format=png&auto=webp&s=e0b6b7b59913fdc685b8eb04d351290b82078129 submitted by /u/Charles_IT_Drive [link] [comments]

My org is moving towards allowing WFH to be permanent. With that, are there any good solutions for remote disk imaging via the internet as the vpn may not be on? submitted by /u/devilish_kevin_bacon [link] [comments]

submitted by /u/DFIRScience [link] [comments]

Does anybody have some good resources (internet, books etc.) for finding some common disk image formats like ISO, VDI and VMDK to see how they differ and which one would be the easiest for analyzing? I have to build a tool that analyzes one of those formats without downloading the whole image and I can't quite find any good resources. So any help is appreciated! submitted by /u/abdell_071 [link] [comments]

submitted by /u/haxboxone [link] [comments]

submitted by /u/sethsec [link] [comments]

KCon 2022 Slide by ourren 一个科技平台型企业的网络安全建设心得 by ourren 更多最新文章，请访问SecWiki

KCon 2022 Slide by ourren 一个科技平台型企业的网络安全建设心得 by ourren 更多最新文章，请访问SecWiki

Conventionally SSH relays were being used using agent forwarding, but I've come to understand that a more secure way is to use a jumphost with the ProxyCommand, as described in this article for example. So in this setup, suppose the attacker gained full root privileges on the relay / jumphost. What kind of damage is the attacker able to do? Are the clients or end-servers under any risk? submitted by /u/forevernooob [link] [comments]

Hi AskNetSec, I remember when I first started out Inbound and Outbound Rules were used as the terminology for firewall and networks. These days it seems to be Ingress and Egress why did we swap? submitted by /u/CyberStagist [link] [comments]

No content preview

No content preview

No content preview

A tabletop exercise (TTX) measures more than an organization’s technical capabilities and adherence to an incident response plan—it facilitates the confluence of personalities and team cultures, in turn revealing friction not only in processes but also in team dynamics. The success of an organization’s response in both a TTX scenario and, more importantly, a real-world... The post How Your Team’s Culture Determines the Value of Your Tabletop Exercise appeared first on TrustedSec.

We provide an overview of the OriginLogger keylogger, including info on a dropper lure and OriginLogger’s configuration and infrastructure. The post OriginLogger: A Look at Agent Tesla’s Successor appeared first on Unit 42.

OAuth Exploitation Continue reading on InfoSec Write-ups »

Hello everyone, today I will show you how to create a Port Scanner in a minute on your Linux or any system with netcat installed. Continue reading on Medium »

作者：Chao Lei, Zhibin Zhang, Cecilia Hu, Aveek Das 译者：知道创宇404实验室翻译组 原文链接：https://unit42.paloaltonetworks.com/moobot-d-link-devices/ 执行摘要 8月初，Unit 42研究人员发现攻击利用了D-Link（一家专门从事网络和连接产品的公司）制造的设备中的多个漏洞。被利用的...

作者：lawhackzz@墨云科技VLab Team 原文链接：https://mp.weixin.qq.com/s/VsGVvi_Vog1aKi0Cj9haGg 本篇文章主要针对内核栈溢出以及堆越界访问漏洞进行分析以及利用。 qwb2018 core 题目链接：https://pan.baidu.com/s/10te2a1LTZCiNi19_MzGmJg 密码：ldiy 解压官方给的tar...

作者：周阳、吕竭@星阑科技PortalLab 原文链接：https://mp.weixin.qq.com/s/MCtwiT93Fo9Js9ekuD-8wA 演讲者介绍 周阳 星阑科技安全研发工程师。具有丰富的漏洞研究及红队武器化经验，历经主机漏洞扫描、应用漏洞扫描、开源软件供应链安全跟踪以及漏洞情报管理平台等多款产品建设，曾参与发现多个linux系统安全漏洞并收到工信部及其他部委致谢。目前...

作者：Chao Lei, Zhibin Zhang, Cecilia Hu, Aveek Das 译者：知道创宇404实验室翻译组 原文链接：https://unit42.paloaltonetworks.com/moobot-d-link-devices/ 执行摘要 8月初，Unit 42研究人员发现攻击利用了D-Link（一家专门从事网络和连接产品的公司）制造的设备中的多个漏洞。被利用的...

作者：lawhackzz@墨云科技VLab Team 原文链接：https://mp.weixin.qq.com/s/VsGVvi_Vog1aKi0Cj9haGg 本篇文章主要针对内核栈溢出以及堆越界访问漏洞进行分析以及利用。 qwb2018 core 题目链接：https://pan.baidu.com/s/10te2a1LTZCiNi19_MzGmJg 密码：ldiy 解压官方给的tar...

作者：周阳、吕竭@星阑科技PortalLab 原文链接：https://mp.weixin.qq.com/s/MCtwiT93Fo9Js9ekuD-8wA 演讲者介绍 周阳 星阑科技安全研发工程师。具有丰富的漏洞研究及红队武器化经验，历经主机漏洞扫描、应用漏洞扫描、开源软件供应链安全跟踪以及漏洞情报管理平台等多款产品建设，曾参与发现多个linux系统安全漏洞并收到工信部及其他部委致谢。目前...

Article URL: https://eclecticlight.co/2022/09/13/how-macos-leaves-users-vulnerable-and-unaware-of-their-vulnerability/ Comments URL: https://news.ycombinator.com/item?id=32821699 Points: 35 # Comments: 11

Google 提议 54 亿美元收购网络安全公司 Mandiant 的交易现在已经完成

思科公司已经确认 Yanluowang 勒索软件团伙泄露的数据是黑客在5月份一次网络攻击中从该公司网络中窃取的。

乌克兰IT军队在8月29日至9月11日的两周内，攻击了2400多个俄罗斯网站，其中包括俄罗斯联邦最大银行。

医疗健康数据不仅事关患者生命安全、个人信息权益，还关乎社会公共利益和国家安全。

这是一种正逐步流行的攻击手法，主要是在活动窗口中创建伪造的登录页面，通常为用户所要登录服务的弹出页。

Monero disclosed a bug submitted by m31007: https://hackerone.com/reports/1511843

Sony disclosed a bug submitted by 0x2374: https://hackerone.com/reports/1508661

Cloudflare Public Bug Bounty disclosed a bug submitted by imtheking: https://hackerone.com/reports/1543259 - Bounty: $350

I have a degree and a help desk background. I have a lot of experience with Linux and virtualization from hobby projects. I want to start on a new project that will help me build strong foundational skills to prepare for the cce exam and for moving my career into dfir. My question is 2-fold: What might be a good project? And what skills should I look to prioratize / develop? submitted by /u/Of_Jotunheimr [link] [comments]

im trying to view this evidence file and the view cluster option in the disk view is greyed out .what do you think is the cause? submitted by /u/shalnark90 [link] [comments]

So I'm about to finish school in the Digital Forensics field and I'm trying to look for a start in the field already, but having trouble doing so. The only experience I really have is what I've learned in school. I'm coming from mainly a retail work experience history. There any advice that anyone can provide that may lead me in the right direction? I'd greatly appreciate any help anyone can provide. submitted by /u/DeviantWolfe [link] [comments]

submitted by /u/thewatcher_ [link] [comments]

submitted by /u/0xdea [link] [comments]

submitted by /u/entropydaemon9 [link] [comments]

submitted by /u/Idov31 [link] [comments]

submitted by /u/c0r0n3r [link] [comments]

submitted by /u/ditrizna [link] [comments]

submitted by /u/ambray_ [link] [comments]

Learn the essentials of Command and Control to help you become a better Red Teamer and simplify your next Red Team assessment! Continue reading on Medium »

Hello world and welcome to HaXeZ, where today we’re continuing the Red Team path on TryHackMe and looking at OPSEC. In essence, TryHackMe… Continue reading on Medium »

This blog curated by experts at Komodo Consulting helps you understand about GitHub red-teamer’s cheat sheet. GitHub has become one of the… Continue reading on Medium »

submitted by /u/SCI_Rusher [link] [comments]

QuickSwap is offering up to $100,000 to users who detect and privately report any vulnerabilities pertaining to our V3 smart contracts. Continue reading on Medium »

In this article, I’ll discuss my favorite recon tools which I often use in Bug Bounty. And a few years ago, I posted a Twitter post by… Continue reading on Medium »

Report from Private Program on Hackerone Continue reading on Medium »

Hey folks, hope you all are doing well! In OWASP Top 10 2021, the Broken Access Control (BAC) grabbed the first position with the most… Continue reading on Medium »

I was hunting for CVE-2021–36356 on my subdomain list of over 1,000,000+ subdomains, and finally got a hit… Continue reading on Medium »

This article is dedicated to log4j and how it’s being exploited in the wild by attackers. Continue reading on InfoSec Write-ups »

Introduction Continue reading on Medium »

I've been tasked with performing a secure configuration review for Meraki firewalls. I wanted to see if anyone had any suggestions such as tools or manual guides to perform such a review. Normally, I'd use Nipper to perform such an audit, but these devices aren't supported. Does anyone have experience in this? It would be greatly appreciated if anyone had any information. submitted by /u/ruarchproton [link] [comments]

[HTB] Bart Writeup by 0x584a SecWiki周刊（第445期) by ourren 更多最新文章，请访问SecWiki

[HTB] Bart Writeup by 0x584a SecWiki周刊（第445期) by ourren 更多最新文章，请访问SecWiki

本文旨在介绍使用 NPM 包管理器时的供应链安全最佳实践，由 OSSF 开源开发者最佳实践工作组总结发布。

三星允许未经授权的第三方设法从该公司的美国系统访问和窃取了客户信息，包括姓名、生日、联系信息和产品注册信息等。

Valve 型内存马是基于 Servlet 内存马来实现的，但是在表现形式上面会稍微有一点区别。

During an Incident Response case, the TrustedSec IR team came across a novel method used by an attacker to maintain access to the target’s servers. After gaining access to the systems, the attacker then modified a DLL required by a service to include malicious code. This video demonstrates a similar process for embedding malicious code... The post Video Blog: Using DLL Persist to Avoid Detection appeared first on TrustedSec.

No content preview

This article is dedicated to log4j and how it’s being exploited in the wild by attackers. Continue reading on InfoSec Write-ups »

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

This article is dedicated to log4j and how it’s being exploited in the wild by attackers. Continue reading on InfoSec Write-ups »

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

This article is dedicated to log4j and how it’s being exploited in the wild by attackers. Continue reading on InfoSec Write-ups »

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

Article URL: https://kubernetes.io/blog/2022/09/12/k8s-cve-feed-alpha/ Comments URL: https://news.ycombinator.com/item?id=32806366 Points: 1 # Comments: 0

Just curious more so on how big your IT Security team is, where you are based geographically and what are the vibes like submitted by /u/securm0n [link] [comments]

Recently I tried Vulnerable REST API which can be found at https://github.com/erev0s/VAmPI I don't have any issue with GET request as all I need is the right url without any http body $ curl 127.0.0.1:5000 { "message": "VAmPI the Vulnerable API", "Help": "VAmPI is a vulnerable on purpose API. It was created in order to evaluate the efficiency of third party tools in identifying vulnerabilities in APIs but it can also be used in learning/teaching purposes." } For POST request, http body is required to send necessary data to the API endpoints. Let's take a look at these 2 which can be found on the github page. POST /users/v1/register Register new user POST /users/v1/login Login to VAmPI Unfortunately, these are the only information given and no documentation on how to craft the request (http body). Since I don't know the http body format for these 2 POST request, I'm getting 400 BAD REQUEST which is expected. Request POST /users/v1/login HTTP/1.1 Host: 127.0.0.1:5000 Accept: */* Connection: close Content-Type: application/x-www-form-urlencoded Content-Length: 0 Request POST /users/v1/register HTTP/1.1 Host: 127.0.0.1:5000 Accept: */* Connection: close Content-Type: application/x-www-form-urlencoded Content-Length: 0 Similar Response for both Requests HTTP/1.0 400 BAD REQUEST Content-Type: application/problem+json Content-Length: 115 Server: Werkzeug/1.0.1 Python/3.9.12 { "detail": "None is not of type 'object'", "status": 400, "title": "Bad Request", "type": "about:blank" } How do I construct the right http body for POST request if I don't have knowledge/documentation about that? submitted by /u/w0lfcat [link] [comments]

submitted by /u/shalnark90 [link] [comments]

I did a logical disk acquisition on a USB stick using DD and calculated the SHA-1 and MD-5 hash using Windows' builtin certutil tool. I then had FTK Imager calculate/verify the hash of the image generated by DD and they matched, as expected. On an experiment, I did a logical disk capture of the physical USB stick through FTK, generated an image in the .E01 format then compared the calculated hash values between FTK's builtin hash calculation tool and Windows' certutil of that FTK generated .E01 file. To my utter surprise, they don't match. What is going on here? Can someone chime in? Video Proof ​ https://reddit.com/link/xbk9fo/video/ibztcd1fw8n91/player ​ submitted by /u/jjThomson69 [link] [comments]

submitted by /u/fiasco_averted [link] [comments]

submitted by /u/dotanoam [link] [comments]

submitted by /u/gid0rah [link] [comments]

I am able to find open Google Drives and add various movies to my drive for later download. Anything 8 gigs will start downloading and as it gets close to completion, abruptly ends/crashes. (I don't recall the specific error rn.) I use Chrome. I have done the usual internet research to no avail. Does anyone know why this is happening? Firewall? Memory issue? A timing issue where the file has to download in a certain amount of time (1 hour time limit)? Chrome addons? A known issue with file size? This issue hasn't always been there. It seems to have started earlier this year. Any help would be appreciated. submitted by /u/Jazr_Dude [link] [comments]

http://103.156.66.58/m1t1/movies/ submitted by /u/looster2018 [link] [comments]

Exploiting WSDLs with Wsdler Continue reading on Medium »

Make a wish. It might be granted! #awswishlist Continue reading on Cloud Security »

I’ve talked about methodology before on this blog when it’s comes to how to learn better whilst doing bug bounty or pentesting but I’ve… Continue reading on Medium »

Hey everyone, I am SYRINE. Cyber Security Enthusiast, eJPT Certified, and currently focusing on bug bounty. Continue reading on Medium »

Hii all, I’m back after a cool break, so where is my system buddy? As a promise, I will continue the series How to Hack with Linux, so… Continue reading on Medium »

物理模拟触屏点击 by 路人甲 PyPI 网络钓鱼活动分析 by 路人甲 关于那WebSocket劫持的二三事 by 路人甲 网络安全的三大支柱和攻击向量 by ourren 网络智能流量编排探索 by ourren 更多最新文章，请访问SecWiki

物理模拟触屏点击 by 路人甲 PyPI 网络钓鱼活动分析 by 路人甲 关于那WebSocket劫持的二三事 by 路人甲 网络安全的三大支柱和攻击向量 by ourren 网络智能流量编排探索 by ourren 更多最新文章，请访问SecWiki

Nextcloud disclosed a bug submitted by luchua: https://hackerone.com/reports/1408692 - Bounty: $250

Summary of the espionage-related news stories for the Week 36 (September 4–10) of 2022. Continue reading on Medium »

Article URL: https://www.ghacks.net/2022/09/08/hp-support-assistant-has-a-dll-hijacking-vulnerability/ Comments URL: https://news.ycombinator.com/item?id=32797230 Points: 1 # Comments: 0

Hi readers, here we will be looking into the detection of password spraying attempts by adversaries. Specifically, we will be creating an… Continue reading on Medium »

Hello world and welcome to Haxez, in this post I’m going to be talking about Red Team Engagements. Again, for those who haven’t been… Continue reading on Medium »

submitted by /u/fusoxide [link] [comments]

http://ns377932.ip-5-196-89.eu/freecomics/books/Unknown/ submitted by /u/looster2018 [link] [comments]

https://www.wanderlodgeownersgroup.com/downloads/ submitted by /u/looster2018 [link] [comments]

Open source verification review, analyzing cases of mined toys Continue reading on Medium »

TRYHACKME: Geolocating Images Continue reading on System Weakness »

As those of us know, OSINT stands for open source intelligence, which refers to any information that can legally be gathered from free… Continue reading on Medium »

Today there is a large number of data leaks from various online services. Continue reading on Medium »

We received more than two dozen applications from individuals of Pakistani origin to compete in OSINT Championship-2022. After necessary… Continue reading on Medium »

Internet Bug Bounty disclosed a bug submitted by gquadros_: https://hackerone.com/reports/1652042 - Bounty: $2000

submitted by /u/jeandrew [link] [comments]

what are machine keys? Continue reading on Medium »

SQL Injection (also known as Structured Query Language injection) is one of the most popular and severe vulnerabilities out there. Continue reading on Medium »

Hello everyone, Continue reading on InfoSec Write-ups »

1. Hak5 — General cybersecurity coverage. 2. The XSS Rat — Everythug bounty hunting. 3. ITProTV — General cybersecurity coverage.  4… Continue reading on Medium »

If you have found sql injection attacks to be confusing and are preparing for oscp but your manual sql injection part is not clear,I am… Continue reading on Medium »

Awesome News🎉 Continue reading on Medium »

今日暂未更新资讯~ 更多最新文章，请访问SecWiki

今日暂未更新资讯~ 更多最新文章，请访问SecWiki

研究人员发现中非和西非超过 85% 的金融机构多次遭受破坏性网络攻击，调查发现是受利益驱动的黑产组织 DangerousSavanna 进行攻击的。

Apologies if I come across as ignorant, but is there any particular reason as to why an examiner would encrypt a file/disk/image they are looking at? Why would someone conceivably make their life harder, given that they'd have to decrypt the disk every single time before examining it? submitted by /u/jjThomson69 [link] [comments]

Not long ago, I posted about When Windows Lies, and that post really wasn't so much about Windows "lying", per se, as it was about challenging analyst assumptions about artifacts, and recognizing misconceptions. Along the same lines, I've also posted about the (Mis)Use of Artifact Categories, in an attempt to address the reductionist approach that leads analysts to oversimplify and subsequently misinterpret artifacts based on their perceived category (i.e., program execution, persistence, lateral movement, etc.). This misinterpretation of artifacts can lead to incorrect findings, and subsequently, incorrect recommendations for improvements to address identified issues. I recently ran across this LinkedIn post that begins by describing AmCache entries as "evidence of execution", which is so…

Is anyone aware of a Microsoft Excel version of the CVSS version 3.1 calculator? My aim is to be able to dynamically download a list of vulnerabilities and individually score them within Excel using a list of environmental and temporal metrics. https://www.first.org/cvss/calculator/3.1 submitted by /u/EmergencyShow [link] [comments]

I had the misfortune of having one of my servers hacked yesterday. Fortunately, I caught it early and not much damage was done. I am currently studying for the flare-on malware reversing competition so I saw this as an opportunity to reverse a real-world sample. It turned out to be the dropper and scanner portion of the dota3 miner. It wasn't up long enough to install the miner portion. After removing the server from the network, I cleaned its mess up and I managed to reverse it down to its Perl source. The IP of the CC server and some publicly known credentials are in the source. Nmap shows that the machine is actually up with the correct ports open. Is there a best place to report this IP to for possible takedown? EDIT: Digging around has led me to this article. https://www.countercraftsec.com/blog/post/cve-2021-4034-vulnerability-exploited-russia-vs-ukraine-situation/ The forensics that I did looks like a different deployment method but the payload is basically the same. Also the strings are written in Portugeese. submitted by /u/jerryrw [link] [comments]

Another way for shellcode execution by using process hollowing. ​ https://crypt0ace.github.io/posts/Shellcode-Injection-Techniques-Part-2/ submitted by /u/Potential_Waltz7400 [link] [comments]

submitted by /u/dmchell [link] [comments]

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

Article URL: https://github.com/google/silifuzz Comments URL: https://news.ycombinator.com/item?id=32787131 Points: 3 # Comments: 0

Hello world and welcome to Haxez, in this post I’m going to be going through the first room in the Red Team learning path on TryHackMe… Continue reading on Medium »

Red Canary Threat Research released 2 new AtomicTestHarnesses — Continue reading on Medium »

We live in the era of technology where everything related to automation has escalated very fastly and along this, it has been seen that… Continue reading on Medium »

This would be third write-up of the Red Teaming learning Path Series, We would start with second chapter Initial Access; Explore the… Continue reading on Medium »

Red Team Assessment And Penetration Testing Service Continue reading on Medium »

submitted by /u/sanitybit [link] [comments]

submitted by /u/sanitybit [link] [comments]

submitted by /u/CyberMasterV [link] [comments]

submitted by /u/laramontoyalaske [link] [comments]

submitted by /u/jeandrew [link] [comments]

Hello readers! Continue reading on Medium »

SocialPwned is an OSINT tool that allows to get the emails, from a target, published in social networks like Instagram, Linkedin and… Continue reading on Medium »

Open Source Intelligence (OSINT) is currently undergoing a major transformation as a tool in the intelligence cycle. OSINT has been a… Continue reading on Medium »

SocialPwned is an OSINT tool that allows to get the emails, from a target, published in social networks like Instagram, Linkedin and… Continue reading on Medium »

SharpHostInfo: 一款快速探测内网主机信息工具 by ourren 内网渗透软件-BloodHound使用指南 by ourren 基于netfilter的后门 by ourren JAVA常用框架SQL注入审计 by ourren 国家级网络攻击能力象限漫谈 by Avenger Govulncheck：Go语言供应链漏洞检测工具 by ourren 更多最新文章，请访问SecWiki

SharpHostInfo: 一款快速探测内网主机信息工具 by ourren 内网渗透软件-BloodHound使用指南 by ourren 基于netfilter的后门 by ourren JAVA常用框架SQL注入审计 by ourren 国家级网络攻击能力象限漫谈 by Avenger Govulncheck：Go语言供应链漏洞检测工具 by ourren 更多最新文章，请访问SecWiki

IBM disclosed a bug submitted by zere: https://hackerone.com/reports/1670586

Article URL: https://portswigger.net/daily-swig/manageengine-vulnerability-posed-code-injection-risk-for-password-management-software Comments URL: https://news.ycombinator.com/item?id=32778824 Points: 2 # Comments: 0

​ I'm trying to help sort through some snapchat geo location data to determine a person's location based on snapchat records, and can't seem to find any info the format used in the reports. While this is not an actual coordinate I'm looking at it's formatted as: Long: -86.234 ± 9.16 meters Lat 36.234 ± 13.45 meters While the first part is pretty obvious, I can't seem to find any info on what the ± 9.16 meters part means. I've looked through various articles on formats of lat and long, but nothing includes meters. Can anyone explain how the meters work? Entering the coordinates into google maps as written doesn't work. I can't find any sites that have the option to enter ± X meters in the coordinates either. submitted by /u/Financial-Tourist272 [link] [comments]

Introduction Continue reading on InfoSec Write-ups »

No content preview

No content preview

No content preview

No content preview

No content preview

Introduction Continue reading on InfoSec Write-ups »

No content preview

No content preview

No content preview

No content preview

No content preview

Introduction Continue reading on InfoSec Write-ups »

No content preview

No content preview

No content preview

No content preview

No content preview

一个名为BackupBuddy的WordPress插件存在一个零日漏洞，正被积极利用。

8月某日，客户官网被黑，需在特定时间内完成整改。为避免客户业务受到影响，实验室相关人员第一时间展开本次攻击事件的应急处理。

pretender是一款功能强大的红队MitM安全测试工具，专为红队研究人员设计。

随着互联网的飞速发展和移动应用程序的广泛应用，弹窗信息推送服务不断出现新情况新问题，需适应形势予以规范。

虽然“隐私”在数字化的世界已经无处安放，但我们却很少去认真思考，隐私究竟是怎样被泄露的？

葡萄牙武装部队总参谋部（EMGFA）遭到网络攻击，黑客窃取了大量北约机密文件。

堡垒机作为服务器和网络安全控制的系统，当其遇到安全风险，大家该如何”排忧解难“？

此渗透测试后已将所有信息移交警方，请勿用于非法用途。

submitted by /u/CodeXTF2 [link] [comments]

作者：thanat0s@360高级攻防实验室 原文链接：http://noahblog.360.cn/xalan-j-integer-truncation-reproduce-cve-2022-34169/ 0x00 前言 这是第一次遇到与 Java Class 字节码相关的漏洞(CVE-2022-34169)，由于漏洞作者提供的利用脚本未能执行成功，所以根据漏洞描述结合自己的理解尝试进...

作者：thanat0s@360高级攻防实验室 原文链接：http://noahblog.360.cn/xalan-j-integer-truncation-reproduce-cve-2022-34169/ 0x00 前言 这是第一次遇到与 Java Class 字节码相关的漏洞(CVE-2022-34169)，由于漏洞作者提供的利用脚本未能执行成功，所以根据漏洞描述结合自己的理解尝试进...

I've seen a place with a lot of URL's to sharepoint and onedrive files. I can't remember the context or how I saw these URL's. Must have been in some admin center. First thing that popped into my head was "security issue". As far as I can tell, you can only share files to specific people or people within the organization. I just checked this using my own Microsoft 365. Are there any security issues with these URL's? Thanks! submitted by /u/damienhull [link] [comments]

Fishing for clues requires an eye for detail Continue reading on The Sleuth Sheet »

EffectGroup is an open source research platform that enables researchers to easily collect, analyze, and visualize data. Continue reading on The Sleuth Sheet »

Intel Inquirer, Intelligence Analyst, Speaker Continue reading on Medium »

I’m delighted to announce that Fahad Nabeel has secured first position to earn the title of OSINT Champion (2022) in Pakistan. Continue reading on Medium »

I had this question a while back when I noticed that I have been interacting with a sock puppet account for years, I wondered what made it… Continue reading on Medium »

What is OSINT, and how do you pronounce that? Let’s start with the latter and work our way from there. Continue reading on Medium »

I saw @bayer_julia’s @quiztime quiz on twitter on 29 August 2022: https://twitter.com/bayer_julia/status/1564355252349984770 and thought… Continue reading on Medium »

Что такое HUMINT? Continue reading on Medium »

As everyone knows information gathering in cyber security and ethical hacking is very important. The more you know about the target, the… Continue reading on Medium »

Hi Was wondering what kind of housekeeping cleaning tasks you do frequently at work relating to cybersecurity For example, every month we: Go through the list of current users on each of our security systems and in turn remove or disable inactive users Check to see users that have not logged onto the network over 90 days in Azure AD Check user groups Curious to see what else people do submitted by /u/securm0n [link] [comments]

For about the last 2 weeks, my network has been going offline a few times a day. I've switched routers (both Netgear brand), called my ISP (Spectrum) several times and gotten no where. The logs on my Netgear router are filled with messages like the following: [DoS attack: FIN Scan] (6) attack packets in last 20 sec from ip [35.186.224.25], Thursday, Sep 08,2022 16:28:22 [DoS attack: FIN Scan] (5) attack packets in last 20 sec from ip [35.186.224.25], Thursday, Sep 08,2022 16:28:01 [DoS attack: FIN Scan] (1) attack packets in last 20 sec from ip [35.186.224.25], Thursday, Sep 08,2022 16:27:33 [DoS attack: FIN Scan] (9) attack packets in last 20 sec from ip [35.186.224.25], Wednesday, Sep 07,2022 23:08:54 [DoS attack: FIN Scan] (9) attack packets in last 20 sec from ip [35.186.224.25], Wednesday, Sep 07,2022 23:08:25 [DoS attack: FIN Scan] (11) attack packets in last 20 sec from ip [35.186.224.25], Wednesday, Sep 07,2022 23:08:05 [DoS attack: FIN Scan] (10) attack packets in last 20 sec from ip [35.186.224.25], Wednesday, Sep 07,2022 23:07:44 [DoS attack: FIN Scan] (9) attack packets in last 20 sec from ip [35.186.224.25], Wednesday, Sep 07,2022 23:07:23 [DoS attack: FIN Scan] (2) attack packets in last 20 sec from ip [35.186.224.25], Wednesday, Sep 07,2022 23:07:01 [DoS attack: FIN Scan] (1) attack packets in last 20 sec from ip [35.186.224.25], Wednesday, Sep 07,2022 23:05:01 [DoS attack: ACK Scan] (1) attack packets in last 20 sec from ip [142.250.190.74], Wednesday, Sep 07,2022 23:02:28 [DoS attack: FIN Scan] (1) attack packets in last 20 sec from ip [107.178.240.159], Wednesday, Sep 07,2022 23:01:43 Any ideas on what to try? Spectrum says everything looks fine on their end but this is frustrating. Edit to clarify: all devices on the network lose internet connectivty when these messages populate. Phones, desktop PCs, laptops, smart speakers. Edit for detail: Router Models tested: Netgear Nighthawk 5000, Netgear Nighthawk 7000 submitted by /u/byrd424 [link] [comments]

I when I started high school my school gave me a personal computer to work from home and I used to search a lot of porn on it. I know it was dumb and I stopped a while ago but I've been worrying whether or not they would ever report me to the principal for it. It's been years and I never got in trouble or talked to about it so I assume if someone at IT did see it they didn't care. My schoolboard usually never cares about what students do with computers as long as it's used for schoolwork and nothing illegal is done with it, for example I had a friend who used to always search up really bad stuff like suicide methods constantly at the school on school wifi and they never even brought it up to him. Despite this I still constantly worry because my mom works as secretary at my school so if something about me gets reported to the principle she will instantly know about it. submitted by /u/Puhskintius23 [link] [comments]

I've found interesting article about API pentest https://www.mindpointgroup.com/blog/rest-assured-penetration-testing-rest-apis-using-burp-suite-part-1-introduction-configuration For blackbox tests, however, we’ll have to build our packets through trial and error using API debugging/mapping tools, such as Postman, and by capturing valid requests/responses using Burp Suite as a proxy service. I was wondering: Why Postman is required? What is Burp limitation for API pentest? Most of API pentest tutorial require combination of Burp + other tools such as Postman Is it possible to perform API pentest with only Burp, without Postman or similar tools? submitted by /u/w0lfcat [link] [comments]

I'm looking to make a career move. I'm 45 and currently managing a blue team of 15 analysts. I have a background in system admin, security admin/engineering, Web application development, security apps with WAF, etc. I want to move to red team, but it's been a while and my coding is rusty. I feel like I can get back to proficiency in pretty short order. Any thoughts on how difficult the transition would be for someone like me? submitted by /u/WTFCanID0 [link] [comments]

submitted by /u/dmchell [link] [comments]

Hello World and welcome to HaXeZ, in this post I’m going to be talking about the new Red Team learning path produced by TryHackMe… Continue reading on Medium »

By Cyborg Security Continue reading on Medium »

Article URL: https://security.googleblog.com/2022/09/fuzzing-beyond-memory-corruption.html Comments URL: https://news.ycombinator.com/item?id=32771755 Points: 1 # Comments: 0

Article URL: https://www.youtube.com/watch?v=Qr6mOm37kNM Comments URL: https://news.ycombinator.com/item?id=32765698 Points: 2 # Comments: 0

Article URL: https://www.code-intelligence.com/webinar/javascript-fuzzing Comments URL: https://news.ycombinator.com/item?id=32763937 Points: 3 # Comments: 0

Users often store passwords in third-party software for convenience – but credential gathering techniques can target this behavior. The post Credential Gathering From Third-Party Software appeared first on Unit 42.

➜XSS (Cross Site Scripting) Continue reading on Medium »

submitted by /u/Gallus [link] [comments]

submitted by /u/0xdea [link] [comments]

submitted by /u/jat0369 [link] [comments]

submitted by /u/0xdea [link] [comments]

submitted by /u/apprakash [link] [comments]

submitted by /u/lmpact_ [link] [comments]

submitted by /u/RedTermSession [link] [comments]

submitted by /u/Gallus [link] [comments]

submitted by /u/boxiso6989 [link] [comments]

submitted by /u/sanitybit [link] [comments]

submitted by /u/sanitybit [link] [comments]

appshark：自动化漏洞及隐私合规检测工具 by ourren EasyPen: 图形化安全巡检与应急工具 by ourren 存储桶学习与漏洞挖掘 by ourren 更多最新文章，请访问SecWiki

appshark：自动化漏洞及隐私合规检测工具 by ourren EasyPen: 图形化安全巡检与应急工具 by ourren 存储桶学习与漏洞挖掘 by ourren 更多最新文章，请访问SecWiki

I encountered a Lenovo Notebook, where the Windows Bitlocker encryption settings showed that Bitlocker is disabled. I then booted a Linux system and it couldn't mount the Windows partition. When I checked the partition header it indicated Bitlocker encryption as follows |.X.-FVE-FS-.....| Now I'm wondering why Windows says Bitlocker is disabled but somehow it is still active. Can you explain this behavior and maybe share some article / blog post about this? submitted by /u/F-2016 [link] [comments]

submitted by /u/Organic-Cover9407 [link] [comments]

For many organizations, data center operations are handled by the facilities team or a third-party vendor. Although these functions aren’t part of the everyday responsibilities of the IT or Security departments, they are crucial to systems availability and to the ongoing operations of the business. Having a full understanding of the capacity and capabilities of... The post The Crucial Role of Data Center Resiliency in Business Security appeared first on TrustedSec.

Article URL: https://twitter.com/peter_szilagyi/status/1567835617932808193 Comments URL: https://news.ycombinator.com/item?id=32764435 Points: 1 # Comments: 0

TikTok否认用户数据和源代码被窃，并称黑客论坛分享的源代码根本不是其平台的后台源代码，并从未与微信数据合并。

无恒实验室自主研发了appshark引擎，用于漏洞及隐私合规风险的自动化检测。

无恒实验室自主研发了appshark引擎，用于漏洞及隐私合规风险的自动化检测。

《规定》共五章五十六条，对于网信部门制度建设、管辖范围、适用细则、执法措施、行政处罚的普通程序、执行与结案等方面皆有相应的规范和要求。

当前，云Web应用程序和API保护市场迅速增长。

该恶意软件可利用多阶段感染链来针对端点和物联网设备。

作者：xxhzz@星阑科技PortalLab 原文链接：https://mp.weixin.qq.com/s/-NW2gjwCP5R_UwCa7eDc_A 前言 在此前分析了CVE-2022-22972 VMware Workspace ONE Access和CVE-2022-22954 VMware Workspace ONE Access SSTI RCE之后，发现当时的安全公告中同时...

作者：xxhzz@星阑科技PortalLab 原文链接：https://mp.weixin.qq.com/s/fEhzBTl3SVVE072ubwi6EA 前言 在上篇分析CVE-2022-26135Atlassian Jira Mobile Plugin SSRF漏洞之后，发现在此之前，jira也曾爆出过身份验证绕过漏洞，CVE编号为cve-2022-0540。趁着环境还热乎，对其产生的原...

作者：AMITAI BEN SHUSHAN EHRLICH 译者：知道创宇404实验室翻译组 原文链接：https://www.sentinelone.com/labs/pypi-phishing-campaign-juiceledger-threat-actor-pivots-from-fake-apps-to-supply-chain-attacks/ 执行摘要 1.JuiceLedge...

作者：xxhzz@星阑科技PortalLab 原文链接：https://mp.weixin.qq.com/s/-NW2gjwCP5R_UwCa7eDc_A 前言 在此前分析了CVE-2022-22972 VMware Workspace ONE Access和CVE-2022-22954 VMware Workspace ONE Access SSTI RCE之后，发现当时的安全公告中同时...

作者：xxhzz@星阑科技PortalLab 原文链接：https://mp.weixin.qq.com/s/fEhzBTl3SVVE072ubwi6EA 前言 在上篇分析CVE-2022-26135Atlassian Jira Mobile Plugin SSRF漏洞之后，发现在此之前，jira也曾爆出过身份验证绕过漏洞，CVE编号为cve-2022-0540。趁着环境还热乎，对其产生的原...

作者：AMITAI BEN SHUSHAN EHRLICH 译者：知道创宇404实验室翻译组 原文链接：https://www.sentinelone.com/labs/pypi-phishing-campaign-juiceledger-threat-actor-pivots-from-fake-apps-to-supply-chain-attacks/ 执行摘要 1.JuiceLedge...

Hi I have been working on the HTTP protocol for some time. After checking and researching, I found out that version 1.0 of the HTTP… Continue reading on InfoSec Write-ups »

Hi I have been working on the HTTP protocol for some time. After checking and researching, I found out that version 1.0 of the HTTP… Continue reading on Medium »

1. Malware Analysis involves writing reports. 2. Access Management involves writing reports. 3. Bug Bounty Hunting involves writing… Continue reading on Medium »

1. Root Me — Challenges. 2. Stök’s YouTube — Videos. 3. Hacker101 Videos — Videos. 4. InsiderPhD YouTube — Videos. 5. EchoCTF —… Continue reading on Medium »

As everyone knows information gathering in cyber security and ethical hacking is very important. The more you know about the target, the… Continue reading on Medium »

Been working inhouse cybersecurity for around 3 years now and so far only have a uni degree in this discipline. Was thinking of getting the following before the end of this calendar year 2022 CompTIA Security+ CCSK Next year, I was thinking maybe OSCP or CISSP What are your thoughts? submitted by /u/securm0n [link] [comments]

We all know that most malware is written to work on Windows. But I think, with security awareness and proper defense mechanisms Windows can be secure as Linux. (I haven't much knowledge about Windows security but I am estimating) I have been using Linux for years and also I am a fan of it. Here are we have any security professionals to explain after security hardening and awareness which can be more secure? Most endpoint devices in the corporates use Linux as I have seen so I think more hardening techniques and products are available for Windows because of that I am asking this, is it possible to have a more secure system with a Windows device rather than Linux? submitted by /u/pacman0026 [link] [comments]

Hi there Do you know how to create a notification when somebody opens the folder on Sharepoint? I found that it probably can be done via O365 Cloud Apps. But I can make a notification when somebody opens the file. But I need to alert when somebody opens the folder and everything that is under this folder/subfolders and so on. submitted by /u/athanielx [link] [comments]

Hi! I'm currently researching a specific scenario with SQL injections where the target application is able to validate if internal MySQL table names (e.g., information_schema.tables) make any appearance in the SQL query. The obfuscation schemes I have come across are rather for bypassing an IDS/WAF and most of theme would not make sense to appear in a normalized form of a SQL query within the application (e.g., an empty comment in the middle of a table name (information_/**/schema.tables) is not valid SQL). I was wondering if it is technically possible in SQL to build a SQLi payload that decodes a table name from an encoded string and where another query is executed on the decoded table name string - similar to Shellcode decoding/encoding schemes. My current understanding is that this cannot work as table names in a FROM clause cannot be strings but I'm not sure if there is perhaps a MySQL function or mechanism that would make such a payload possible? submitted by /u/TolgaDevSec [link] [comments]

I am in need of help finding the perfect disposable email service. I want something cheap/free, does not self-destruct emails until deleted, and offers multiple domain options. Any advice? submitted by /u/CandleAggressive5299 [link] [comments]

submitted by /u/VVX7 [link] [comments]

View the talk schedule here, and then jump into the corresponding playlist: Breaking Ground Common Ground Ground Floor Ground Truth Hire Ground I Am The Cavalry Passwords Con Proving Ground submitted by /u/sanitybit [link] [comments]

submitted by /u/haveitall [link] [comments]

submitted by /u/sanitybit [link] [comments]

submitted by /u/sanitybit [link] [comments]

submitted by /u/CyberMasterV [link] [comments]

submitted by /u/edreatingmonkey [link] [comments]

submitted by /u/_kawhl [link] [comments]

submitted by /u/0xdea [link] [comments]

submitted by /u/jeandrew [link] [comments]

submitted by /u/Gallus [link] [comments]

submitted by /u/sanitybit [link] [comments]

Hi all, I’m working on a case where I see hundreds of files being modified/created from the above location. It doesn’t appear to be related to the USN journal as I’m not seeing USN in the file path. What would cause this? Research online hasn’t been all that helpful. Hoping someone can point me in the right direction. Thanks in advance. submitted by /u/hotsausce01 [link] [comments]

submitted by /u/CyberMasterV [link] [comments]

Bug bounty həvəskarları üçün yazıram xüsusi olaraq — siz də standart sadə xss payloadlarını bütün bug bounty saytlarında sınamaqdan… Continue reading on Medium »

Terms in the Domain of Cyber Security Continue reading on Medium »

Hi everybody, today i will show you how can simple technique lead you to find multiple series vulnerabilities across the whole subdomains Continue reading on InfoSec Write-ups »

Hi everybody, today i will show you how can simple technique lead you to find multiple series vulnerabilities across the whole subdomains Continue reading on Medium »

Welcome home, Quidli! Continue reading on Medium »

We are happy to announce the launch of our bug bounty program on Immunefi. Continue reading on Q Blockchain »

¡Comienza una nueva asociación con InsureDAO! Hace un par de meses, anunciamos nuestra asociación para principiantes con InsureDAO, lo que… Continue reading on Medium »

Article URL: https://github.com/python/cpython/issues/95778 Comments URL: https://news.ycombinator.com/item?id=32753681 Points: 2 # Comments: 1

submitted by /u/edreatingmonkey [link] [comments]

Hey there, thought I would share my slides from #defcon #adversaryvillage : https://github.com/sourcefrenchy/DEFCON-30---Exotic-Data-Exfiltration submitted by /u/Necessary-Look-4159 [link] [comments]

Article URL: https://twitter.com/snawoot/status/1567554873536692224 Comments URL: https://news.ycombinator.com/item?id=32753062 Points: 3 # Comments: 0

B站流式传输架构的前世今生 by ourren 更多最新文章，请访问SecWiki

B站流式传输架构的前世今生 by ourren 更多最新文章，请访问SecWiki

Learn the essentials of Command and Control to help you become a better Red Teamer and simplify your next Red Team assessment! Continue reading on System Weakness »

TryHackMe never ceases to astound us with its unique and simple approach to teaching cybersecurity content. Continue reading on Medium »

SOAR solutions enhance cybersecurity by combining automation, orchestration, and threat data collection from multiple sources, as well as… Continue reading on Medium »

思科在六月发现了一个发起三次独立攻击行动的攻击者，攻击者的技术并没有高超到定制化开发工具，而是使用了现成的工具。

一、信息收集1.端口扫描使用nmap进行扫描找到五个打开的 TCP 端口。有一个 Apache (80)，三个 Tornado（8080、80801 和 8082），还有一些在 3000 上看起来像 HTTP 的东西。基于Apache 版本，主机可能运行 Ubuntu 22.04 jammy。Tornado是一个基于 Python 的 Web 框架，旨在在 Python 异步方法中工作。2.目录爆

Resecurity 的研究人员最近发现了一个新的网络钓鱼即服务（PhaaS）平台 EvilProxy。

开源项目Apache IoTDB grafana-connector 模块存在未授权漏洞，攻击者可通过web服务可能会获取数据库的内部结构。

MooBot 僵尸网络以易受攻击的 D-Link 路由器为目标，混合使用新旧漏洞，展开网络攻击。

这些泄露的个人信息，未来很有可能被攻击者在社会工程或网络钓鱼攻击活动中利用。

http://jedi-sec.space/jedi-sec.space/docuploads/ submitted by /u/blue_Kazoo82 [link] [comments]

Found this which is an true gem. It even has the winter episodes which is so rare to find in good quality. This is very rare, so grab it before it’s gone https://creamy.oreos.workers.dev/0:/Wipeout.PACK.DANiSH.PDTV.XviD/ submitted by /u/manitobawater [link] [comments]

https://creamy.oreos.workers.dev/0:/mirrorbot/Alex%20Jones%20Movie%20Pack%20480p%20DVDRip%20x264/ submitted by /u/manitobawater [link] [comments]

You used to be able to find a plethora of open directories on the internet just by using classic google dorks like filetype:mp4 ... But for some reason this doesn't work anymore. Does anyone know why or know of an alternative search engine to comb the internet for files of a certain type? Some file extensions, like pdf and xls, still work. But mp3, mp4, epub, exe, and several others I tested are no longer searchable. Edit: Apparently, this is the link of all the file types google indexes:https://developers.google.com/search/docs/advanced/crawling/indexable-file-types I swear they used to index just about all common file types. submitted by /u/shad_x9000 [link] [comments]

Continue reading on Medium »

I’m interested in OSINT (open source intelligence), and I listen to podcasts to keep learning. Continue reading on Medium »

MTN Group disclosed a bug submitted by aliyugombe: https://hackerone.com/reports/1638347

作者：VLab扫地僧@墨云科技VLab Team 原文链接：https://mp.weixin.qq.com/s/MiKWnGuyXTTLQVKjq2E_Gw 漏洞概述 Spring Cloud Function 是基于Spring Boot 的函数计算框架（FaaS），该项目提供了一个通用的模型，用于在各种平台上部署基于函数的软件，包括像 Amazon AWS Lambda 这样的 Faa...

作者：VLab扫地僧@墨云科技VLab Team 原文链接：https://mp.weixin.qq.com/s/MiKWnGuyXTTLQVKjq2E_Gw 漏洞概述 Spring Cloud Function 是基于Spring Boot 的函数计算框架（FaaS），该项目提供了一个通用的模型，用于在各种平台上部署基于函数的软件，包括像 Amazon AWS Lambda 这样的 Faa...

Hello everyone, I am S Rahul, working as a Information Security Analyst at NUK 9 Auditors and A Bug bounty hunter at Hackerone, Bugcrowd… Continue reading on System Weakness »

Hello everyone, I am S Rahul, working as a Information Security Analyst at NUK 9 Auditors and A Bug bounty hunter at Hackerone, Bugcrowd… Continue reading on Medium »

A new partnership with InsureDAO begins! A couple months back we announced our beginner partnership with InsureDAO allowing projects to be… Continue reading on Medium »

What is CSRF? Continue reading on Medium »

Hello all, I hope you’re fine! Our story today is about one of the most interesting bugs I found, actually, it’s my first time finding… Continue reading on Medium »

Hi everyone, Continue reading on Medium »

Good afternoon, I'm getting the following error when trying to output psort to ELK https://preview.redd.it/4yzce6gisam91.png?width=907&format=png&auto=webp&s=34e57efd80265b20ab5972b8a12f568cf4cbbcda I've done pip install --upgrade pyelasticsearch, but it is still saying that pyelasticsearch is unsupported. Any help is appreciated. Thanks, DBR submitted by /u/DeadBirdRugby [link] [comments]

Hello guys, I am not an expert in this field, hopefully, I get help from you. I do have a question: ​ I created forensic images of a hard drive via FTKimager. Actually, I created two images, one for records and the second one to work on it. The issue is the forensic images have different hashes and I haven't touched the data on the hard disk imaged. Is this something expected? I checked the .txt file that FTK creates and the Hash didn't match in the two images. ​ Thanks in advance! submitted by /u/ampenate [link] [comments]

I have two Android devices and I'd like to explore some Android forensics. One of them, however, I don't know the passcode to. I assume everything will be encrypted on the one I can't unlock? Can I even get an image off of it? submitted by /u/RobbieRigel [link] [comments]

Hi, everyone! I'm new in this field, and i try to practice some stuff. I wondered if i get image of a disk, then can i get access to it in virtual machine environment? Like VirtualBox or Hyper-V? Because I tried both of them but unfortunately I kept getting errors and errors so I'm here asking from ones who has experience :') submitted by /u/symbolofperfection [link] [comments]

Hey y'all, I am struggling to come to a conclusion about an RDP event I have noted in a job. Log was identified on a Microsoft RDS server (lets call it WIN-RDS), it was an Event ID 21. WIN-RDS has internal IP of 10.1.1.10 and an external IP of 192.178.1.1 The associated Windos Event ID on WIN-RDS is 21 and states the source network address is 192.178.1.1.... remeber that WIN-RDS has captured this event log and 192.178.1.1 is its own public IP address... ​ Anyone able to shine some light onto how an RDP session can happen on the RDS from its own Public IP??? I am struggling to find anything to help my cause and really dont want to put it down as an anomaly as malicious activity happened during this RDP session. submitted by /u/Phorc3 [link] [comments]

Currently in my organisation, I frequently check to see if anyone tried logging in from overseas from unknown countries and it then causes a high number of alerts in 365 defender. Other suspicious activity I look out for are contractors that want to access shares. USB ports are disabled by default, anyone who wants to use a USB needs to seek approval, usually do grill a bit as USB is frowned upon IMO and then only give them temp access What other activities do you look for in your organisation and how? Thanks submitted by /u/securm0n [link] [comments]

For those of you who are familiar with Risk Assessment frameworks, I am wondering if any of you are aware of any mapping between Threat Events (e.g. using NIST 800-30) and the Mitre Att&ck techniques. I am essentially looking for something similar to the following: NIST Threat Event X = Mitre Att&ck techniques 1, 3 & 5. NIST Threat Event Y = Mitre Att&ck techniques 6 & 8. ...or vice versa. ​ Link to references: NIST Threat Events: https://nvlpubs.nist.gov/nistpubs/legacy/sp/nistspecialpublication800-30r1.pdf Mitre Att&ck Matrix for Enterprise: https://attack.mitre.org submitted by /u/EmergencyShow [link] [comments]

U.S. Dept Of Defense disclosed a bug submitted by s1m0x1: https://hackerone.com/reports/1033253

U.S. Dept Of Defense disclosed a bug submitted by maskedpersian: https://hackerone.com/reports/1636345

U.S. Dept Of Defense disclosed a bug submitted by tmz900: https://hackerone.com/reports/1627616

U.S. Dept Of Defense disclosed a bug submitted by hachimanxienim: https://hackerone.com/reports/1631370

U.S. Dept Of Defense disclosed a bug submitted by hachimanxienim: https://hackerone.com/reports/1631364

U.S. Dept Of Defense disclosed a bug submitted by shanekag: https://hackerone.com/reports/1620247

U.S. Dept Of Defense disclosed a bug submitted by tmz900: https://hackerone.com/reports/1626962

U.S. Dept Of Defense disclosed a bug submitted by j4k3d: https://hackerone.com/reports/1326352

U.S. Dept Of Defense disclosed a bug submitted by cruxn3t: https://hackerone.com/reports/1606068

U.S. Dept Of Defense disclosed a bug submitted by alitoni224: https://hackerone.com/reports/1566758

U.S. Dept Of Defense disclosed a bug submitted by martinvw: https://hackerone.com/reports/1457928

Rockstar Games disclosed a bug submitted by bugstar: https://hackerone.com/reports/1680818 - Bounty: $250

Omise disclosed a bug submitted by codeslayer137: https://hackerone.com/reports/1538669 - Bounty: $100

submitted by /u/0xdea [link] [comments]

submitted by /u/achilles4828 [link] [comments]

submitted by /u/sandeep1337 [link] [comments]

submitted by /u/sanitybit [link] [comments]

submitted by /u/monoimpact [link] [comments]

submitted by /u/albinowax [link] [comments]

submitted by /u/Gallus [link] [comments]

submitted by /u/wtfse [link] [comments]

submitted by /u/ambray_ [link] [comments]

A very common and easy attack that provides user credentials stored in SYSVOL share that can be used to get a shell or escalate privileges. Continue reading on Medium »

Olá Comunidade, me deparei com um erro “/bin/bash^M: bad interpreter”recentemente em um projeto do github, vou compartilhar com vocês como… Continue reading on Medium »

http://37.156.146.163/PUB/ submitted by /u/Deafcon2018 [link] [comments]

I downloaded some models I wanted to use for a project, but they’re all iAVATAR files and I have no idea how to open these. submitted by /u/32mafiaman [link] [comments]

Volume, Key Metrics and Projections for September Continue reading on SX Network »

[HTB] Chatterbox Writeup by 0x584a OPSWAT 2022 年恶意软件分析调查报告 by Avenger 更多最新文章，请访问SecWiki

[HTB] Chatterbox Writeup by 0x584a OPSWAT 2022 年恶意软件分析调查报告 by Avenger 更多最新文章，请访问SecWiki

Hacker, disinformation fighter, Elliot Continue reading on Medium »

I came across this OSINT quiz by OSINT Dojo a while ago, but i’ve only just gotten round to having a look at it. Continue reading on Medium »

An association matrix is an analysis technique used in intelligence to identify associations between various points of interest. This can… Continue reading on Medium »

As TikTok continues to surpass other social media platforms as the go-to app for information as well as entertainment, we take a closer… Continue reading on Medium »

Continue reading on Medium »

Article URL: https://go.dev/blog/vuln Comments URL: https://news.ycombinator.com/item?id=32737886 Points: 300 # Comments: 51

Article URL: https://reco.ai/vulnerability-report-lucid-charts/ Comments URL: https://news.ycombinator.com/item?id=32732280 Points: 1 # Comments: 0

Hey guys it’s me Uday and today i’ve found a very interesting tool and i would like to share information that i’ve collected, so let’s… Continue reading on Medium »

Hey guys it’s me Uday and today i’ve found a very interesting tool and i would like to share information that i’ve collected, so let’s… Continue reading on Medium »

Attackers are leveraging known vulnerabilities in D-Link devices to deliver MooBot, a Mirai variant, potentially leading to further DDoS attacks. The post Mirai Variant MooBot Targeting D-Link Devices appeared first on Unit 42.

安全研究人员还发现SOVA还增加了一个令人意想不到的新功能——可对手机等移动端进行数据加密和勒索攻击。

爱尔兰监管机构以侵犯儿童隐私对Instagram罚款 4.05 亿欧元 ，Meta 表示将会提起上诉。

9月6日，Meta违反了GDPR被罚款约4亿美元的新闻迅速引爆了科技圈。

一旦EvilProxy宣传的功能成为现实，那么人人皆可成为黑客，企业安全将面临巨大的网络钓鱼攻击威胁。

CI/CD管道中存在安全漏洞，攻击者可以利用这些漏洞来破坏开发过程并在部署时推出恶意代码。近日，研究人员在Apache和Google的两个非常流行的开源项目的GitHub环境中发现了一对安全漏洞，可用于秘密修改项目源代码、窃取机密并在组织内部横向移动。据Legit Security的研究人员称，这些问题是持续集成/持续交付（CI/CD）缺陷，可能威胁到全球更多的开源项目，目前主要影响Google

新兴跨平台BianLian勒索软件的运营商本月增加了他们的命令和控制（C2）基础设施，这一发展暗示着该组织的运营节奏正在提速。使用Go编程语言编写的BianLian勒索软件于2022年7月中旬首次被发现，截至9月1日已声称有15个受害组织。值得注意的是，这一新兴的双重勒索勒索软件家族与同名的Android银行木马没有联系，后者主要针对移动银行和加密货币应用程序窃取敏感信息。安全研究人员Ben Ar

在该工具的帮助下，我们可以实现更快速的代理以及更加高级的Socks5功能。

作者：seven010@墨云科技VLab Team 原文链接：https://mp.weixin.qq.com/s/XYpeT7tdVD7l-LfFrhDm-g 今天笔者给大家推荐一篇高效的基于决策的黑盒对抗攻击算法的文章——SurFree: a fast surrogate-free black-box attack，目前该工作已被CVPR2021录用。 论文地址：https://arx...

作者：seven010@墨云科技VLab Team 原文链接：https://mp.weixin.qq.com/s/XYpeT7tdVD7l-LfFrhDm-g 今天笔者给大家推荐一篇高效的基于决策的黑盒对抗攻击算法的文章——SurFree: a fast surrogate-free black-box attack，目前该工作已被CVPR2021录用。 论文地址：https://arx...

submitted by /u/sh0n1z [link] [comments]

submitted by /u/jeandrew [link] [comments]

submitted by /u/smaury [link] [comments]

submitted by /u/buherator [link] [comments]

submitted by /u/wez32 [link] [comments]

submitted by /u/IHTeam [link] [comments]

submitted by /u/anyore909 [link] [comments]

submitted by /u/gid0rah [link] [comments]

MTN Group disclosed a bug submitted by aliyugombe: https://hackerone.com/reports/1285694

MTN Group disclosed a bug submitted by aliyugombe: https://hackerone.com/reports/1351326

MTN Group disclosed a bug submitted by aliyugombe: https://hackerone.com/reports/1351329

MTN Group disclosed a bug submitted by aliyugombe: https://hackerone.com/reports/1351338

MTN Group disclosed a bug submitted by aliyugombe: https://hackerone.com/reports/1351341

MTN Group disclosed a bug submitted by aliyugombe: https://hackerone.com/reports/1351359

MTN Group disclosed a bug submitted by aliyugombe: https://hackerone.com/reports/1434276

Semrush disclosed a bug submitted by a_d_a_m: https://hackerone.com/reports/1218754 - Bounty: $500

So I'm an adjunct instructor for My Computer Career, A+ and Linux Essentials. I have done a little tiny bit of computer forensics in my life. I am preparing a slide to teach the students some "above and beyond" information about computer forensics, mainly undeleting files. I've played with PhotoRec, for instance, and I remember in the 90s the undelete tool of Norton Utilities. So as I am studying up about the various filesystems, I am noting the differences between how ext2, ext3/4, ntfs and fat32 delete files. For those who do a lot of undelete or forensics with drives, would you be willing to give your opinion as to the filesystem that makes file undeletion the easiest? I'm thinking ext2 or FAT16/32 but I am not an expert in this field. Thanks in advance! submitted by /u/OneEyedC4t [link] [comments]

I want to know, how does Volatility know from a memory dump to which process a physical frame belongs to? I think I'm familiar with how the OS translates a virtual address to a physical. So a virtual address space is split into pages. Each virtual address is translates to a physical address via page tables. A physical address is a memory address within a physical frame inside my memory dump. How does Volatility determine to which process a physical frame belongs to? I'm mostly interested in Windows if this makes any difference. submitted by /u/13pcfx37 [link] [comments]

Hey everyone, I was wondering what your thoughts are in regards to career progression as a forensic analyst. I’m currently in the DFIR space and am a forensic analyst consultant for a decent sized company. I’m curious as to what you think would be progression in the field. Would it just to keep going on the forensic path and eat and breathe forensics? Or would going into Threat Hunting keep my career moving? Probably a debatable topic but I’m always trying to see what I need to do to keep sharp and moving in the right direction. Thanks in advance everyone. submitted by /u/thiefofalways1313 [link] [comments]

I have a set search I do on Shodan to look for open Calibre libraries... and suddenly I noticed that the number of overall results is WAY lower. Like, there used to be dozens of results for, say, the United Kingdom. Now there's only... 16. 6 for all of Australia. Anyone else notice this? What gives? submitted by /u/look_who_it_isnt [link] [comments]

Slightly curious to know and understand how organisations deal with phishing incidents. Typically one would assume the following: Block sender and delete all phishing emails from within the gateway Reset user password and revoke sessions Run AV scan and isolate off the network submitted by /u/securm0n [link] [comments]

Hi everyone, a noob here want to be a bug bounty hunter. I have watched some youtube videos talking about how to become an ethical hacker. Most of them talk about reading writeups, doing CTFs, they tell about some websites like hacker101, tryhackme but I don't know where to begin from if know nothing about hacking. I have done little bit of coding in linux, know some very basic linux commands, used kali & ubuntu. I know core python & javascript. But talking about hacking I know nothing. Just tell me about best way to enter infosec domain for bug hunting perspective & what resources to follow. Thank you in advance your advice will be very helpful for me. ​ PS : I also don't have any knowledge about networking so recommend me a book or something. submitted by /u/gagan_anttal [link] [comments]

Hi, does the content for the GDSA exam get updated regularly? I mean if one did the course several years ago but didn't do the cert at the time would the current exam now be considerably different to the course subject matter from a 3-4 years ago? Thanks submitted by /u/Veedubius [link] [comments]

While lastpass and 1password are the most known password managers,many suggest bitwarden here on Reddit. What makes it a better choice,beside the price?? Any thoughts on RoboForm,which is one of the oldest and fairly cheaper than the other two? submitted by /u/Giorgin07 [link] [comments]

Explicando de forma simples o que é e quais são os tipos de Pentest. Continue reading on Medium »

If there’s anything to take out of my blog read “START BEFORE YOU START!”. Continue reading on Medium »

If there is anything to take out of my blog read “START BEFORE YOU START!”. Continue reading on Medium »

No content preview

Introduction Continue reading on InfoSec Write-ups »

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

Introduction Continue reading on InfoSec Write-ups »

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

Introduction Continue reading on InfoSec Write-ups »

No content preview

No content preview

No content preview

No content preview

No content preview

Article URL: https://www.theverge.com/2022/9/5/23337648/google-chrome-install-update-security-vulnerability Comments URL: https://news.ycombinator.com/item?id=32726199 Points: 5 # Comments: 0

Article URL: https://fuzzcheck.neocities.org/introduction.html Comments URL: https://news.ycombinator.com/item?id=32726078 Points: 1 # Comments: 0

SecWiki周刊（第444期) by ourren 基于AI算法的数据库异常监测系统的设计与实现 by 路人甲 利用Nginx、Tyk Gateway API和CloudFlare防火墙隐藏C2设施 by 路人甲 内网渗透一周目小结 by SecIN社区 更多最新文章，请访问SecWiki

SecWiki周刊（第444期) by ourren 基于AI算法的数据库异常监测系统的设计与实现 by 路人甲 利用Nginx、Tyk Gateway API和CloudFlare防火墙隐藏C2设施 by 路人甲 内网渗透一周目小结 by SecIN社区 更多最新文章，请访问SecWiki

submitted by /u/Jonathan-Todd [link] [comments]

Busy is happy to reveal the second and last long-awaited Community Testing event V2. The updated version of BusyChain testnet V3 goes… Continue reading on BusyTechnology »

Introduction Continue reading on InfoSec Write-ups »

First Whoami : Dris R. A Security Researcher, Penetration Tester from Paris ,France. Continue reading on Medium »

In the world of cyber security, there is a constant battle between white hat hackers (security researchers who identify vulnerabilities to… Continue reading on Medium »

三星表示其经历了一起攻击，渗透使黑客能够访问某些数据，例如部分美国用户的姓名，联系人和人口统计信息，出生日期以及产品注册详细信息。

作为国内首个模糊测试SaaS服务平台，当前已开放beta版免费注册使用。

俄罗斯打车应用程序 Yandex 遭到黑客攻击，数百名司机被“送到”莫斯科地区同一个上车点，造成了大面积交通堵塞。

西北工业大学遭网络攻击事件系美国国家安全局（NSA）所为。在针对该校的网络攻击中，NSA使用了40余种专属网络攻击武器。

泄露的信息源自一种名为990-T的表格，该表格主要用于非营利组织（慈善机构）或 IRA（个人退休账户） 及 SEP 账户。

Continue reading on Medium »

Ask NetSec, What is the ISO/IEC Standard that defines terms such as Principle, Authorisation, Authentication, User, Identity Provider, Service Provider. submitted by /u/CyberStagist [link] [comments]

Has anyone taken the WCNA (Wireshark Certified Network Analyst) exam? I'd like to get an idea for how difficult the exam is. The study guide is ~1000 pages. submitted by /u/SharkByte1333 [link] [comments]

So I am 25 year old woman and I have been working since I was 18. So I have quite some experience. I changed job to a cybersecurity company as a Technical Pre-Sales consultant for 57.000€ annually. (Munich,Germany). And I found out recently that the Account Executive that we have who has few years more experience than me earns 120k€ annually. I accepted the salary because at the time I was desperate and told them anything above 55K€ would be fine. My mistake, yes. But the difference between our salaries now is making me very dissatisfied and a bit angry. What are my options? submitted by /u/warwitchxx [link] [comments]

Hey guys, been thinking about where I go from here for while and need some help figuring out my next move, at the moment I head up a team internally doing secops (including vulnerability management and some of the more technical security architecture) I'm not sure I want to continue heading up department but don't really want to loose out on the $$ I'm not a ciso and report into one. I was looking at furthering my technical skills and try my hand at getting into IR companies like fire-eye or the MS DART team or getting to the point where I could do purple teaming engagements non stop. I came from a technical background but have done security architecture, SOC and GRC ( I'm not cut out for GRC) my offensive security isn't up to scratch and was looking at the PNPT as a first step and portswigger academy for brushing up on my web app. if I was to dive deeper into DFIR is there anything outside of SANS (GIAC) certs / courses that match the quality? and finally but almost as important how much do guys doing IR on a retainer basis make and how much do purple teamers earn? submitted by /u/alphayun [link] [comments]

submitted by /u/_cydave [link] [comments]

SPOILER ALERT: THIS IS A POSSIBLE SOLUTION Continue reading on Medium »

Hi Guys, Continue reading on Medium »

Hey All , Continue reading on Medium »

Welcome future Cybersecurity Crack’s to my fifth post this time we are going to learn about the Google Bug Bounty for Open Source Projects Continue reading on Medium »

今日暂未更新资讯~ 更多最新文章，请访问SecWiki

今日暂未更新资讯~ 更多最新文章，请访问SecWiki

Article URL: https://isc.sans.edu/diary.html?storyid=0 Comments URL: https://news.ycombinator.com/item?id=32714273 Points: 1 # Comments: 0

Article URL: https://dgl.cx/2022/08/nat-again-irc-cve-2022-2663 Comments URL: https://news.ycombinator.com/item?id=32711688 Points: 9 # Comments: 0

MTN Group disclosed a bug submitted by theranger: https://hackerone.com/reports/1272478

Here's "Living-Off-the-Blindspot", or how you can operate in EDRs' blindspot with Python. If you missed my @DEFCON @AdversaryVillag talk you'll find in the post all the information and the demo videos presented. Enjoy! EDR #evasion #OST #redteaming submitted by /u/naksyn_ [link] [comments]

Summary of the espionage-related news stories for the Week 35 (28 August-3 September) of 2022. Continue reading on Medium »

Open-source intelligence (OSINT) is the collection and analysis of data gathered from open sources (overt and publicly available sources)… Continue reading on Medium »

https://www.imdb.com/title/tt0077000/ submitted by /u/Ricardoies [link] [comments]

Hi everyone, my writeup for the Phoenix CTF Challenges, Stack One is now live on my blog https://secnate.github.io/ctf/phoenix/phoenix-stack-one/ Any feedback would be most welcome! submitted by /u/ProgrammingBro123 [link] [comments]

submitted by /u/soupcreamychicken [link] [comments]

submitted by /u/soupcreamychicken [link] [comments]

https://vulns-sec.com/ https://twitter.com/vulns_sec submitted by /u/soupcreamychicken [link] [comments]

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

submitted by /u/sanitybit [link] [comments]

submitted by /u/sanitybit [link] [comments]

submitted by /u/CyberMasterV [link] [comments]

submitted by /u/sanitybit [link] [comments]

submitted by /u/sanitybit [link] [comments]

TRUTHTRACER: This mountain, the one with the jagged peak, at 40.378279, 46.728738 — could that be the one from the third photo? Continue reading on Medium »

ctf.my.id is indonesian ctf to celebrate indonesia’s independence day Continue reading on Medium »

Listen carefully, some texts hold deep secrets Continue reading on The Sleuth Sheet »

This list of books is a great way to start your Open Source Intelligence learning journey. Continue reading on The Sleuth Sheet »

今日暂未更新资讯~ 更多最新文章，请访问SecWiki

今日暂未更新资讯~ 更多最新文章，请访问SecWiki

How to hack wireless networks. Continue reading on System Weakness »

On 11th April 2022, it was a regular day for me. I went to the office & started my daily activities. Continue reading on Medium »

in this part I’m going to show you the impact of Youtube on Bug Bounty Hunters with my best Bug Report … Continue reading on Medium »

Hello Security folks, In previous article, we came to know about CPU Registers and Understanding of Structure of Stack which will help us… Continue reading on Medium »

How long are they typically and how much time do they take up? Are they exceedingly repetetive, with little to no thought required? submitted by /u/victorMemer5 [link] [comments]

What will my week be like? If I love problem-solving and working for long periods of time, will I be in luck or will I simply only be needed every once in a while? If the latter is true, what do I do in between my services? What kind of social situations should I expect? Any and all feedback is greatly apprrciated, thank you! submitted by /u/victorMemer5 [link] [comments]

MTN Group disclosed a bug submitted by a-heybati: https://hackerone.com/reports/1427086

Nextcloud disclosed a bug submitted by eg42: https://hackerone.com/reports/1595006 - Bounty: $250

Nextcloud disclosed a bug submitted by nickvergessen: https://hackerone.com/reports/1596918

Nextcloud disclosed a bug submitted by anna_larch: https://hackerone.com/reports/1561471

Nextcloud disclosed a bug submitted by rtod: https://hackerone.com/reports/1200815

MTN Group disclosed a bug submitted by harrisoft: https://hackerone.com/reports/817331

I've talked and written about timelines as an analysis process for some time, in both this blog and in my books, because I've seen time and again over the years the incredible value in approaching an investigation by developing a timeline (including mini- and micro-timelines, and overlays), rather than leaving the timeline as something to be manually created in a spreadsheet after everything else is done. Now, I know timelines can be "messy", in part because there's a LOT of activity that goes on on a system, even when it's "idle", such as Windows and application updates. This content can "muck up" a timeline and make it difficult to distill the malicious activity, particularly when discerning that malicious activity is predicated solely on the breadth of the analyst's knowledge and experi…

I've blogged a bit...okay, a LOT...over the years on the topic of parsing LNK files, but a subject I really haven't touched on is LNK builders or generators. This is actually an interesting topic because it ties into the cybercrime economy quite nicely. What that means is that there are "initial access brokers", or "IABs", who gain and sell access to systems, and there are "RaaS" or "ransomware-as-a-service" operators who will provide ransomware EXEs and infrastructure, for a price. There are a number of other for-pay services, one of which is LNK builders. In March, 2020, the Checkpoint Research team published an article regarding the mLNK builder, which at the time was version 2.2. Reading through the article, you can see that the building includes a great deal of functionality, there's …

Dear community, I`d love to share this great achievement with you. After 3 months of hard work I was able to obtain the GCFA on the 1st attempt. I`m working in the IR team and I do have 4 years experience within the field. Nevertheless I need to admit that overall FOR 508 course was pretty exciting and I enjoyed it a lot. From my perspective the final exam was a bit harder than the 2 practice exams provided within the course, I have to say that the difficulty was raised by a notch. As mentioned multiple times before, the are primarily testing your understanding of the concepts , index/notes helps but do not rely on it completely. I would say do the training, get through the labs 2 times, use their MP3s provided to the training. Read the books and work hard, hard work pays off trust me. I wish all the best to all the people which already passed this beast and also to all the future students of this class. submitted by /u/_KATER_ [link] [comments]

整理一些 TCP 相关的 BPF 内容，主要来自 Facebook 和 Google 的分享。 关于 “BPF 进阶笔记” 系列 平时学习和使用 BPF 时所整理。由于是笔记而非教程，因此内容不会追求连贯，有基础的 同学可作查漏补缺之用。 文中涉及的代码，如无特殊说明，均基于内核 5.10。 BPF 进阶笔记（一）：BPF 程序（BPF Prog）类型详解：使用场景、函数签名、执行位置及程序示例 BPF 进阶笔记（二）：BPF Map 类型详解：使用场景、程序示例 BPF 进阶笔记（三）：BPF Map 内核实现 BPF 进阶笔记（四）：调试 BPF 程序 BPF 进阶笔记（五）：几种 TCP 相关的 BPF（sockops、struct_ops、header options） 关于 “BPF 进阶笔记” 系列 1 Socket 相关类型：sockops 1.1 技术背景 1.2 设计初衷 1.3 特点（尤其是与之前其他 BPF 程序的不同） 1.4 ops 分类 1.5 实现简介 struct bpf_sock_ops struct bpf_sock_ops_kern： tcp_call_bpf() 两种类型的 sock_ops BPF helper 函数 1.6 例子 2 TCP 拥塞控制（CC） 2.1 struct struct_ops 2.2 拥塞控制算法：C 和 BPF 实现 2.3 加载并启用新 CC 算法 通过 libbpf 加载 通过 bpftool 加载 通过 sysctl 启用 通过 setsockopt() 启用 2.4 性能 3 TCP header options 3.1 需求 3.2 例子 4 struct sk_storage：socket 的本地存储（local storage） …

Greetings researchers, this is a brief writeup on one of my most recent discoveries regarding a bug bounty programme. Let’s educate… Continue reading on Medium »

We are super excited to welcome Angle Protocol to the Hats ecosystem! We look forward to helping them add a layer of security to their… Continue reading on Medium »

Hi , I am back with another blog And in this we will be learning about Fuzzing was about to write on fuzzing binaries or exe’s but Thought… Continue reading on Medium »

In this room of tryhackme we learn to see some enumeration and little bit about buffer overflow vulnerability. Continue reading on Medium »

Today I will show some techniques that can be used to exploit OAuth 2.0 and possibly allow an attacker to take over the victim's account… Continue reading on InfoSec Write-ups »

Last Monday, Google introduced its latest Open-Source Bug Bounty Projects, paving the way for bug bounty hunters for a payout ranging… Continue reading on Medium »

Hi hackers & Security Enthusiasts, I’m Saransh Saraf and this a simple bug with a critical Impact. I hope you’ll enjoy it and learn… Continue reading on Medium »

1. Shodan — Search for devices connected to the internet. 2. Wigle — Database of wireless networks, with statistics. 3. Grep App — Search… Continue reading on Medium »

1. IT Security Guru 2. Security Weekly 3. The Hacker News 4. Infosecurity Magazine 5. CSO Online 6. The State of Security — Tripwire 7… Continue reading on Medium »

Has anyone used a software that can timestamp as your document. Something that displays a time stamp every time to press enter to a new line. submitted by /u/derekdoes1t [link] [comments]

I've worked the majority of my career in the electricity generation space. I can tell you all about securing OT, especially power related OT. I can tell you all about the Purdue model, etc. I'm moving to a fintech/bank soon. People who have worked cybersecurity in the financial sector (banks, insurance, fintech, etc). what would you recommend learning about/reading/etc to get familiar (or even become a cybersecurity expert) in the financial sector? For example, Open Banking API worth learning about? submitted by /u/Itchy-Criticism-5470 [link] [comments]

Red Team Development and Operations Continue reading on Medium »

submitted by /u/digicat [link] [comments]

submitted by /u/sanitybit [link] [comments]

submitted by /u/sanitybit [link] [comments]

submitted by /u/sanitybit [link] [comments]

submitted by /u/_rs [link] [comments]

submitted by /u/chicksdigthelongrun [link] [comments]

submitted by /u/_rs [link] [comments]

submitted by /u/sanitybit [link] [comments]

submitted by /u/sanitybit [link] [comments]

2022上半年网络安全漏洞态势观察 by ourren 更多最新文章，请访问SecWiki

2022上半年网络安全漏洞态势观察 by ourren 更多最新文章，请访问SecWiki

My Director just informed me I have 5k I can spend on training (conferences, certs, training etc) this year and I've been wanting to learn more about DFIR and eventually transition into the field. Do I try for SANs (org is a ren-isac member so there are some discounts available I believe)? Go for IACIS? Background: Higher Ed field, Bachelor's in Information Technology, CISA, CDPSE, CIPM, Sec+, SSCP, ITILv4 Foundations. I've performed one "investigation" related to misuse of funds where I observed chain of custody and imaged several Mac devices then later looked for evidence using autopsy. Thanks in advance for any advice. submitted by /u/youkoflame [link] [comments]

XSS nədir?Necə çalışır? Continue reading on Medium »

Continue reading on Medium »

http://falsesoul.com submitted by /u/NavaShieldWasTaken [link] [comments]

Hey folks. So after trying wget I feel its a bit of a nightmare to get working. Lot of circumstances it doesnt work or downloads in a very obscure way. Attempting to a do a super large directory using httrack but struggling to work out what is wrong. checking over the hts-log.txt file there is zero errors. previous to this I did get errors on the directory due to the implied security limitations if you are not using the param --disable-security-limits. Previous the cache claimed that files were being throttled at a specific size and there was a mismatch error. Now there are zero errors but file sizes seem to be even smaller than before. At a loss as to what is happening, is just the way this is downloading? There are circa 1200 files each of around 3GB in size. Do I need to the wait for it to "round robin" these files to be completed? Ive no idea about how the parallelism will work with this. Any insight to this would be fantastic. Thanks. submitted by /u/MaxSan [link] [comments]

Process Injection in C# https://crypt0ace.github.io/posts/Shellcode-Injection-Techniques/ submitted by /u/Potential_Waltz7400 [link] [comments]

Summary Basic SIEM requirements should be in place to create mature detections for a variety of log sources, including network logs, system logs, and application logs (including custom applications). This focuses on Security Operations and does not include the engineering side of SIEM management, e.g., licensing, hardware/cloud requirements, retention needs, etc. Each component of the... The post Detection and Alerting: Selecting a SIEM appeared first on TrustedSec.

Article URL: https://attackerkb.com/topics/RHuGSieFJe/cve-2021-38406 Comments URL: https://news.ycombinator.com/item?id=32689158 Points: 2 # Comments: 0

Have a nice weekend everyone… Continue reading on Medium »

No content preview

No content preview

No content preview

MTN Group disclosed a bug submitted by drak3hft7: https://hackerone.com/reports/1408589

十三届全国人大常委会第三十六次会议 9 月 2 日表决通过反电信网络诈骗法，该法将于 2022 年 12 月 1 日起施行。

各位Buffer周末好，以下是本周「FreeBuf周报」，我们总结推荐了本周的热点资讯、安全事件、一周好文和省心工具，保证大家不错过本周的每一个重点！热点资讯1、DEF CON 大会：白帽黑客演示远程控制退役卫星8 月 20 日的 DEF CON 黑客大会上，白帽黑客组织 Shadyte l现场演示远程劫持一颗退役卫星，并利用它来播放电影。2、苹果曝严重安全漏洞，喜提热搜第一据媒体报道，苹果公司在

我国首部《反电信网络诈骗法》（以下简称《反诈骗法》）已于9月2日表决通过，12月1日起正式施行。

黑山政府的关键基础设施遭到了勒索软件攻击，黑客索要 1000 万美元巨款。

概述近期，绿盟科技伏影实验室捕获到一系列互相关联的钓鱼攻击活动。经过分析，伏影实验室确认这些活动来自APT组织Evilnum，是该组织近期网络攻击行动DarkCasino的延续。本轮网络攻击活动发生在7月下旬至8月上旬。Evilnum攻击者在活动中继续使用其常用的攻击思路，包括pif类型和压缩包类型的诱饵文件、围绕自研木马程序DarkMe构建的攻击链、以及各式第三方工具等。DarkCasino是由

今年中秋，“共建者”探险小分队，让知识变得更有趣。

Unless otherwise noted, changes described below apply to the newest Chrome beta channel release for Android, ChromeOS, Linux, macOS, and Windows. Learn more about the features listed here through the provided links or from the list on ChromeStatus.com. Chrome 106 is beta as of September 1, 2022. You can download the latest on Google.com for desktop or on Google Play Store on Android. Origin Trials This version of Chrome supports the origin trials described below. Origin trials allow you to try new features and give feedback on usability, practicality, and effectiveness to the web standards community. To register for any of the origin trials currently supported in Chrome, including the ones described below, visit the Chrome Origin Trials dashboard. To learn more about origin trials in …

Hey everyone, I don’t interact that much besides upvoting and lurk here quite a bit. Just wanted to post that I passed my GCFA. Test was tough but glad it’s over and certificate was completed! submitted by /u/avenger_of_zendikar [link] [comments]

Does anybody have a way to do this, or the name of a forensics suite that actually does it correctly? submitted by /u/sanreisei [link] [comments]

I have been working digital forensics for my department for almost 4 years now. The issue I am now running into is how long to keep original images of extracted devices? I know after the investigative process the relevant evidence is exported and reported as evidence with the rest of the image being sealed away. I do seal the images into a offline HDD storage. But I am starting to max out another 8TB drive. I am asking how long people keep the original extractions or if someone can point to a policy/law that gives me some direction. Thanks in advance submitted by /u/nub_cho [link] [comments]

This is where all non-forensic data recovery questions should be asked. Please see below for examples of non-forensic data recovery questions that are welcome as comments within this post but are NOT welcome as posts in our subreddit: My phone broke. Can you help me recover/backup my contacts and text messages? I accidently wiped my hard drive. Can you help me recover my files? I lost messages on Instagram, SnapChat, Facebook, ect. Can you help me recover them? Please note that your question is far more likely to be answered if you describe the whole context of the situation and include as many technical details as possible. One or two sentence questions (such as the ones above) are permissible but are likely to be ignored by our community members as they do not contain the information needed to answer your question. A good example of a non-forensic data recovery question that is detailed enough to be answered is listed below: "Hello. My kid was playing around on my laptop and deleted a very important Microsoft Word document that I had saved on my desktop. I checked the recycle bin and its not there. My laptop is a Dell Inspiron 15 3000 with a 256gb SSD as the main drive and has Windows 10 installed on it. Is there any advice you can give that will help me recover it?" After replying to this post with a non-forensic data recovery question, you might also want to check out r/datarecovery since that subreddit is devoted specifically to answering questions such as the ones asked in this post. submitted by /u/AutoModerator [link] [comments]

Hello Everyone, I am from the US (PNW) and interested in getting into the Digital Forensics field. Did four years at university, didn't like it, and now I am working on a 2-year degree in IT from my local community college. In my free time, I am doing learning modules on hackthebox academy and participating in live CTF events when I can. I am curious to hear from this community about how I can get my foot in the door in this field. I do not know if what I am doing right now is the ideal path that I should follow, or should I focus my time more on specific certifications rather than CTF's competitions and cybersecurity fundamentals ? I am also wondering if it is a good idea to check with my local PD to see if they have any opportunities ? Sorry if this is too off-topic, but talking with people from this community seems to me like a great resource to learn from. Thank You. submitted by /u/abrahr1123 [link] [comments]

TikTok disclosed a bug submitted by sinayeganeh: https://hackerone.com/reports/1527906 - Bounty: $2500

MTN Group disclosed a bug submitted by dh0pe: https://hackerone.com/reports/1397788

MTN Group disclosed a bug submitted by dh0pe: https://hackerone.com/reports/1397786

MTN Group disclosed a bug submitted by ibrahimatix0x01: https://hackerone.com/reports/1320242

MTN Group disclosed a bug submitted by aliyugombe: https://hackerone.com/reports/1164452

Adobe disclosed a bug submitted by aneeeketh: https://hackerone.com/reports/1591770

Hyperledger disclosed a bug submitted by fatal0: https://hackerone.com/reports/1635854 - Bounty: $1500

Acronis disclosed a bug submitted by mrccrqr: https://hackerone.com/reports/1615790 - Bounty: $100

Let’s talk about offensive security! This article will outline some of my favorite tools for hacking into networks, establishing foothold… Continue reading on Medium »

submitted by /u/SatansMoisture [link] [comments]

submitted by /u/Plastic_Preparation1 [link] [comments]

submitted by /u/littlepreptalk [link] [comments]

submitted by /u/PM_ME_TO_PLAY_A_GAME [link] [comments]

For example 1 passport breach of someone's data is ££££ ? Personally Identifiable Information (PII) Examples. Thank you Reddit. submitted by /u/syswww [link] [comments]

代码审计之路之白盒挖掘机 by ourren 6种方法探测Cisco设备版本 by ourren 商业银行安全纵深防御体系探索与实践 by ourren 安全防御体系建设 by ourren 新型数据中心网络安全体系研究 by ourren 更多最新文章，请访问SecWiki

代码审计之路之白盒挖掘机 by ourren 6种方法探测Cisco设备版本 by ourren 商业银行安全纵深防御体系探索与实践 by ourren 安全防御体系建设 by ourren 新型数据中心网络安全体系研究 by ourren 更多最新文章，请访问SecWiki

Sebelum kita belajar lebih jauh kita perlu tau apa itu Fuzz atau Fuzzing. Fuzzing adalah salah satu teknik automated software testing yang… Continue reading on Medium »

Sebelum kita belajar lebih jauh kita perlu tau apa itu Fuzz atau Fuzzing. Fuzzing adalah salah satu teknik automated software testing yang… Continue reading on Medium »

OSINT DOJO Continue reading on The Sleuth Sheet »

Write-up pour le challenge twitter @quiztime Continue reading on Medium »

Foller.me  https://foller.me  Basic Twitter account statistics, interactions and analytics on the last 100 tweets Continue reading on Medium »

Ever wondered how the data you share on the internet could be used to extract sensitive information about you? As a proof of concept, we… Continue reading on Medium »

A curated list of amazingly awesome open source intelligence tools and resources. Open-source intelligence (OSINT) is intelligence… Continue reading on Medium »

Overview Continue reading on The Sleuth Sheet »

submitted by /u/RossGeerlings [link] [comments]

submitted by /u/digicat [link] [comments]

submitted by /u/sanitybit [link] [comments]

Article URL: https://arstechnica.com/information-technology/2022/08/microsoft-finds-tiktok-vulnerability-that-allowed-one-click-account-compromises/ Comments URL: https://news.ycombinator.com/item?id=32676624 Points: 2 # Comments: 0

不同企业对数据备份采取的措施参差不齐，这其中有哪些特殊性？该如何为应对勒索攻击做好数据备份？

英国电信行业的新安全框架将于 10 月生效，使英国的电信安全法规成为世界上最严格的法规之一。

Apache多后缀解析漏洞及换行解析漏洞。

TikTok安卓版存在一个高危漏洞，攻击者可能借此实现一键式账户劫持，影响数亿用户。

意大利石油巨头ENI 遭受网络攻击，攻击者破坏了其计算机网络，但该公司称，攻击并未产生很恶劣的影响。

本次峰会以“聚力数据安全 赋能企业现代化”为主题，吸引了超过650位CIO、CSO以及CISO通过线上线下的形式参会。

8月29日，谷歌推出了开源软件漏洞奖励计划 (OSS VRP)，是首批特定于开源的漏洞计划之一。

网络安全是医疗数字化的底座，网络安全基础未能夯实，医疗数字化就无法实现真正的腾飞。

submitted by /u/digicat [link] [comments]

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

1. Cyber Work 2. Click Here 3. Defrag This 4. Security Now 5. InfoSec Real 6. InfoSec Live 7. Simply Cyber 8. OWASP Podcast 9. We Talk… Continue reading on Medium »

AdvisoryWeek — Security advisory roundups by major vendors. We Live Security — Award-winning news, views and insights. CSO Online — News… Continue reading on Medium »

A curated list of amazingly awesome open source intelligence tools and resources. Open-source intelligence (OSINT) is intelligence… Continue reading on Medium »

submitted by /u/Clement_Tino [link] [comments]

Snapchat disclosed a bug submitted by mahfujwhh: https://hackerone.com/reports/1626281 - Bounty: $250

Cloudflare Public Bug Bounty disclosed a bug submitted by motu-vai: https://hackerone.com/reports/1618021 - Bounty: $350

curl disclosed a bug submitted by haxatron1: https://hackerone.com/reports/1613943

Cloudflare Public Bug Bounty disclosed a bug submitted by lohigowda: https://hackerone.com/reports/1467044 - Bounty: $200

Article URL: https://www.theverge.com/2022/8/31/23329662/tiktok-vulnerability-microsoft-one-click-exploit-high-severity Comments URL: https://news.ycombinator.com/item?id=32669851 Points: 10 # Comments: 1

Article URL: https://www.macrumors.com/2022/08/31/apple-releases-ios-12-5-6/ Comments URL: https://news.ycombinator.com/item?id=32667852 Points: 1 # Comments: 0

Article URL: https://www.microsoft.com/security/blog/2022/08/31/vulnerability-in-tiktok-android-app-could-lead-to-one-click-account-hijacking/ Comments URL: https://news.ycombinator.com/item?id=32664898 Points: 4 # Comments: 0

Azure DevOps Server development system segmentation best practices : sergiomarotco/Azure-DevOps-Server-segmentation-cheat-sheet submitted by /u/Marotso [link] [comments]

Hi everyone, I recently received two offers in cybersecurity from a big 4 company and the NSA. For starter, I am fresh out of school with a MIS degree. Initially, I agreed to go with NSA and went under investigation background check already. However, it’s been over 3 months and I still have not received a final offer and start date from them. Around a week ago, a Big4 firm offers me a position that pays $30,000 more (we’re looking at close to six figures after bonuses, on my first year). Now I am conflicted on what to do. Initially, I thought that the work with NSA would be more challenging than that of any private sector. But my friends and families are advising me otherwise. I’ve scrolled through some threats on here about GOV vs Private and most people seem to be saying the opposite of what I expect: that you get more boring work, less incentive and slower promotion with NSA. Any advice for me? Edit: to add to it, I got an internship with Big4, and they extended a full time offer after it ends. So there should be a chance I’m able to reapply for full time position with not much trouble later on. submitted by /u/Any_Career_4379 [link] [comments]

Any other pros/cons? submitted by /u/name1wantedwastaken [link] [comments]

Intro: Continue reading on Medium »

$whoami Continue reading on Medium »

By Reading this article you suppose to learn: Continue reading on System Weakness »

By Reading this article you suppose to learn: Continue reading on Medium »

What is API? Continue reading on Medium »

In this blog, I am going to explain how OAuth 2.0 works and what vulnerabilities can be raised if it is implemented incorrectly. Continue reading on InfoSec Write-ups »

Hi, For those of you who are unfamiliar with what IP Rotation is, I’m going to share a quick tip and trick with you all on how to use… Continue reading on System Weakness »

Hi, pada kesempatan kali ini gue akan membagikan sebuah tips and trick sederhana bagi kalian semua heker-meN(Red) bagaimana caranya… Continue reading on Medium »

Namaste everyone, Welcome to ‘PTN’ infosec monthly #3. We are back with the third newsletter with infosec updates. We started ‘PTN infosec… Continue reading on Pentester Nepal »

Watering hole is a computer attack strategy in which an attacker guesses or observes which websites an organization often uses and infects… Continue reading on Medium »

1. Infosec Institute  — Cybersecurity awareness. 2. Black Hat — Technical cybersecurity conferences. 3. Bugcrowd  — Bug bounty methodology… Continue reading on Medium »

OWASP Risk Rating Methodology In general terms, OWASP Risk Rating Methodology takes us through a series of steps that can use to calculate… Continue reading on Medium »

One of the most common questions asked by business leadership is also one of the most challenging to answer: “How secure are we?” Now, some of you reading this may already be cringing or yelling at your screen that this question on its own shouldn’t have a simple answer with little actionable value. However, when... The post Maturity, Effectiveness, and Risk – Security Program Building and Business Resilience appeared first on TrustedSec.

Writeup for the The Listeners contract a Geo-Location CTF offered by tiberianorder.com Continue reading on The Sleuth Sheet »

OPSEC stands for Operational Security. OPSEC is a set of principles to follow so that information can’t be gathered from non-involved… Continue reading on The Sleuth Sheet »

Write-up pour le challenge twitter @quiztime Continue reading on Medium »

Write-up pour le challenge twitter @quiztime Continue reading on Medium »

submitted by /u/Blakebvhjjdd [link] [comments]

submitted by /u/sanitybit [link] [comments]

submitted by /u/CyberMasterV [link] [comments]

submitted by /u/bobtbot [link] [comments]

submitted by /u/_rs [link] [comments]

submitted by /u/_rs [link] [comments]

submitted by /u/Hefty_Knowledge_7449 [link] [comments]

submitted by /u/SRMish3 [link] [comments]

submitted by /u/0xdea [link] [comments]

submitted by /u/sanitybit [link] [comments]

Article URL: https://blog.fuzzbuzz.io/fuzzing-go-apis-for-sql-injection/ Comments URL: https://news.ycombinator.com/item?id=32664270 Points: 57 # Comments: 18

Article URL: https://www.code-intelligence.com/blog/jazzer.js Comments URL: https://news.ycombinator.com/item?id=32659564 Points: 1 # Comments: 1

证券行业应用安全架构设计实践 by ourren Windows域内横向渗透实例 by ourren 更多最新文章，请访问SecWiki

证券行业应用安全架构设计实践 by ourren Windows域内横向渗透实例 by ourren 更多最新文章，请访问SecWiki

No content preview

No content preview

No content preview

该工具能够结合其他多种网络安全工具并以自动化的形式完成整个渗透测试过程。

这款渗透测试工具能够帮助广大研究人员自动扫描、检测和利用跨站脚本XSS漏洞。

2022年，美国CISO的总薪酬中位数（包括年化股权和长期激励措施）从93.6万美元增加到97.1万美元。

START平台的管理员称，黑客从公司系统中窃取了2021 年的数据库，目前正在在线分发样本。

该恶意软件由 Golang 编写，利用詹姆斯韦伯望远镜的空间图像来传播恶意软件。

FreeBuf甲方社群 | 社群直播系列回顾【持续更新中】

Hi everyone. I'm applying for a Digital Forensics expert position at a law enforcement agency in Europe. In this agency, DF experts are sworn officers and have training at the academy like any other officer (although the focus is more on forensics). After the academy they are assigned to specific positions and career paths that differ from that of regular LE officers/agents. Does anyone have a similar experience and can explain a typical day in the life of a DF expert? submitted by /u/InfoSecSensei [link] [comments]

Someone logged into my accounts and deleted both my ring camera footage and blink camera footage on a particular day. To my understanding, when the footage is gone it can’t be recovered unless subpoenaed however anything related to the time it was deleted or from where would help. This is non negotiable. thanks submitted by /u/OKsaving612 [link] [comments]

This field is harder to break into than Cyber Security itself. The closest thing I found was literally a malware analyst position where I can use forensic related tools but I can’t find anything on Handshake for students that have anything to do with computer forensic’s. submitted by /u/OhmyMary [link] [comments]

在 GitLab 中发现了一个关键问题，该问题影响15.1.6前、从15.2 到15.2.4以及从 15.3 到 15.3.2 的所有版本，该漏洞允许经过身份验证的用户通过GitHub 导入功能远...

在 GitLab 中发现了一个关键问题，该问题影响15.1.6前、从15.2 到15.2.4以及从 15.3 到 15.3.2 的所有版本，该漏洞允许经过身份验证的用户通过GitHub 导入功能远...

We are increasing prices for Burp Suite Professional and Burp Suite Enterprise Edition, due to a significant increase in costs caused by global inflation. The price of an annual Burp Suite Professiona

We are increasing prices for Burp Suite Professional and Burp Suite Enterprise Edition, due to a significant increase in costs caused by global inflation. The price of an annual Burp Suite Professiona

Covers how you can use WinAPI in C# for red team tooling. https://crypt0ace.github.io/posts/WinAPI-and-PInvoke-in-CSharp/ submitted by /u/Potential_Waltz7400 [link] [comments]

submitted by /u/PM_ME_TO_PLAY_A_GAME [link] [comments]

作者：三牛@墨云科技VLab Team 原文链接：https://mp.weixin.qq.com/s/A6lFJMapxfPZJF6TCKLcKQ 无论从网络安全的攻击或是防护视角，信息的采集和甄别都至关重要，其中主机的系统类型是关键出发点。在以往经验中，根据操作系统类型往往能够大致判断其存在的风险点及风险类型，因此，识别主机操作系统类型对系统网络安全防护具有极其重要的意义。 操作系统识别...

作者：三牛@墨云科技VLab Team 原文链接：https://mp.weixin.qq.com/s/A6lFJMapxfPZJF6TCKLcKQ 无论从网络安全的攻击或是防护视角，信息的采集和甄别都至关重要，其中主机的系统类型是关键出发点。在以往经验中，根据操作系统类型往往能够大致判断其存在的风险点及风险类型，因此，识别主机操作系统类型对系统网络安全防护具有极其重要的意义。 操作系统识别...

submitted by /u/sanitybit [link] [comments]

submitted by /u/sanitybit [link] [comments]

submitted by /u/sanitybit [link] [comments]

submitted by /u/sanitybit [link] [comments]

submitted by /u/sanitybit [link] [comments]

submitted by /u/mrexodia [link] [comments]

submitted by /u/0xfffffg [link] [comments]

submitted by /u/hackers_and_builders [link] [comments]

submitted by /u/gid0rah [link] [comments]

submitted by /u/sanitybit [link] [comments]

submitted by /u/sanitybit [link] [comments]

submitted by /u/sanitybit [link] [comments]

Siber istihbarat konusunda yeni bilgiler öğrenerek kendimi geliştirmek için bulabildiğim kaynaklar ile çalışmalar yapmaktayım. Çalıştığım… Continue reading on Medium »

Hello all, I've been studying DFIR for years and I'm in Incident Response nowadays. I have been picturing myself becoming a consultant for DFIR because I've spent quite a bit of time working indirectly with consultants of other fields and I've seen how they are able to work hard for a few months and make enough money that they can then just stop working until the next job comes along. My question is whether that is actually what consulting looks like anywhere in DFIR and if not what does it look like? I know I would have to continue to keep up with learning either way and I'm not looking for something easy. I just love the idea of dedicating myself to something worthwhile while being able to take time off in between. For some background, I have a chance to move into a dedicated forensics position at my current company and the only hang up is that I'd be going from fully remote to fully in office or maybe hybrid so I'm trying to figure out how much I want to sacrifice for the sake of career advancement and where that can take me is a huge factor. submitted by /u/drfantabulo [link] [comments]

Hey everyone, I'm looking to get my masters in digital forensics all online. I currently have a BA in Cybersecurity and two minor degrees, one in computer forensics and one in IT! One program I found that I'm interested in is Michigan State Universities cybercrime and digital investigations masters, but I want to know what the highly regarded colleges are incase they can give me a better education. Any help is appreciated since this seems like a harder masters to find for larger institutions. Before asking here I checked on r/netsec and the Academic Program threads I found are all 3+ years old that the FAQ here asks you to check first. Thank you! submitted by /u/Cyberqtea [link] [comments]

Hi yall, I'm trying to acquire an aws snapshot but when I do the acquisiton I see that there is at least one folder missing. I have the snapshot unmounted and I used dcfldd and ftkimager and neither are able to get the folder I need. For reference, I'm trying to acquire a web server and the folder I need is the website within the user s home directory. The folder isn't a symbolic link so om looking in the right place. I'm very confused. Any ideas? submitted by /u/shonen787 [link] [comments]

TLDR: I would like to get an entry level certificate in digital forensics, but I don't know where to start. I need your suggestions. I currently work as a level 1 Data center technician. I only work with hardware but I have some Linuy knowledge I gained on my free time. I would like to start a career in the digital forensics world. I remember taking a course a long time ago about using apps to investigate device owned by criminals and creating chain of custody. I don't remember anything from that course, but I remember enjoying it at the time and I am wondering if there is an entry level certificate for something like that. Edit: is there such a certificate focus on phones? submitted by /u/Lostinsssst [link] [comments]

Hey there is this internship for a malware analyst intern and cyber threats that says on handshake km qualified for but I have no cyber security experience just computer forensics. Haven’t done any Cyber Security work but I’d as a intern I need to have some understanding how to detect malware. Should I apply to this position? For $15/hr I figure also for low pay it can’t be that bad but I’m skeptical if it’s right for me? submitted by /u/OhmyMary [link] [comments]

It was the end of another semester, and I was really bored, so decided to take a look at the system that my college uses to store and… Continue reading on Medium »

Today we’re going to talk about SSRF attack that allows hackers to send any network requests from the back-end server by using tags. Continue reading on Medium »

Without the jail time. lol Continue reading on Medium »

hello everyone myself charan (also know as falcon_319) in bug bounty community and i am occasional bug bounty hunter and agriculture… Continue reading on Medium »

Successful Cyberattacks often start at the “Network Perimeter”. Continue reading on InfoSec Write-ups »

We are preparing to launch Capture The Bug, NZ’s first bug bounty platform. And are welcoming bug hunters from around the world to share… Continue reading on Medium »

These links are cool, but also slow. Is there some way to speed them up or filter down to the ones that are faster? I tried looking for ipfs ones, they were equally slow or broken. there used to be some free to use CDNs, I think coral was one - it's probably mostly dead, but I bet there are new ones based on webrtc data-channel... Or is there just a better place to find specifically this kind of stuff but faster? Remember kodi/xbmc? Did it use directories like these or something quite a bit more organized? submitted by /u/Admirable_Bass_1948 [link] [comments]

http://37.187.115.51 submitted by /u/caculo [link] [comments]

I recently came across a way to get a google unlimited account on the cheap. it works as it should...though ive been reluctant to use it. Upon reading the terms of service on a shared to me Google Drive account from the Organization Admin; it says the admin has the right to all content, to add or delete....so this raises a huge security question for me... I dont plan on putting anything person in this account. simply rips of content for us all to enjoy, I just wonder if theirs some way the videos files on there could be edited and turned against the other users for the shared google drive. google says they monitor for warez and hacks and such, but who knows how accurate that is. My main concern would be to get keylogged or something like that from simply adding files and playing them occasionally through players. ​ what are your thoughts guys, would love to hear em. found another unlimited storage off seas service that would be a ftp server; which i could work with as well and for this one; i would be admin of the account. little pricier but could be worth it? submitted by /u/AcidAlchamy [link] [comments]

Hi, I write https://github.com/OWASP/CheatSheetSeries/blob/master/cheatsheets_draft/Network_Segmentation_Cheat_Sheet.md, but it steel in draft mode, can u help? submitted by /u/Marotso [link] [comments]

Let's suppose that a friend of a friend was wandering around the internet WITHOUT any offensive tools and found out that some idiot has an open HTTP server with all his personal and family photos on it. Let's suppose as well that the friend of my friend couldn't simply mind his own business since it's about the very information safety of a person, and managed to find, between all that data, some sort of contact which could point to that person, by means of the company he works at. Let's add to that that the guy is Russian. ​ How should my friend's friend proceed to tell the guy about it without getting in problems? submitted by /u/drgetbetter [link] [comments]

Article URL: https://security.googleblog.com/2023/08/Announcing-Googles-Open-Source-Software-Vulnerability-Rewards-Program%20.html Comments URL: https://news.ycombinator.com/item?id=32653620 Points: 2 # Comments: 1

TikTok disclosed a bug submitted by fransrosen: https://hackerone.com/reports/1598749 - Bounty: $1500

SecWiki周刊（第443期) by ourren 更多最新文章，请访问SecWiki

SecWiki周刊（第443期) by ourren 更多最新文章，请访问SecWiki

本次文章只用于技术讨论，学习，切勿用于非法用途，用于非法用途与本人无关！

本次文章只用于技术讨论，学习，切勿用于非法用途，用于非法用途与本人无关！

vulnhub系列12—DC 6

美国陆军本周宣布对外招募网络战部队，防御国外政府发动的网络攻击以及防御工作。

《办法》共5章三十四条，分为总则、网络安全管理、数据安全管理、监督管理、管理保障五个大章节，适用于医疗卫生机构运营网络的安全管理。

该诉讼旨在阻止Kochava收集涉及敏感地理位置的数据，并要求该公司删除已经收集的数据。

crAPI在设计上故意遗留了大量安全漏洞，我们可以通过 crAPI学习和研究API安全。

该工具不仅可以生成其自己的PowerShell Payload，还支持加密，可以测试Windows系统的安全性。

研究人员发现了从泰国医学科学部泄漏的患者个人身份信息（PII），其中包含部分 COVID-19患者的数据信息。

有安全厂商表示，该勒索攻击事件有可能是黑客通过供应链污染或漏洞的方式进行投毒。

Article URL: https://infosecwriteups.com/exploiting-printnightmare-cve-2021-34527-10c6e0f5b83f?gi=8d08f1a86b88 Comments URL: https://news.ycombinator.com/item?id=32650687 Points: 2 # Comments: 0

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

This Cybersecurity role is responsible for the IT Security Strategy of the organization. In this article I will describe the role of the… Continue reading on Medium »

Shellcode, bagi yang sering berinteraksi dengan reverse engineering dan offensive operation (pentest, exploit development, adversary… Continue reading on Reversing.ID »

关于星链计划 「404星链计划」是知道创宇404实验室于2020年8月提出的开源项目收集计划，这个计划的初衷是将404实验室内部一些工具通过开源的方式发挥其更大的价值，也就是“404星链计划1.0”，这里面有为大家熟知的Pocsuite3、ksubdomain等等，很快我们就收到了许多不错的反馈。2020年11月，我们将目光投向了整个安全圈，以星链计划成员为核心，筛选优质、有意义、有趣、坚持...

作者：墨云科技VLab Team 原文链接：https://mp.weixin.qq.com/s/CBj03EPBlsGe689Lc74qHQ Google于2022年4月11日更新了Chrome的100.0.4896.88，其中修复了由@btiszka在3月18日报告的正则表达式模块的UAF漏洞；6月28日，Google纰漏了该漏洞的具体细节，目前该漏洞已被修复并公开了技术细节，本文将从技...

作者：阿布@墨云科技VLab Team 原文链接：https://mp.weixin.qq.com/s/91g9szVMDyXC17u6Vx453A RDP协议（Remote desktop protocol） RDP（remote desktop protocol）桌面远程传输协议，是一个多通道的协议，可以让用户连接上提供微软终端机服务的电脑。RDP协议大部分被应用在Windows操作系统...